PT-2022-1488
CVE-2022-23402
·
تاريخ النشر
2022-01-07
·
تاريخ التحديث
2022-03-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CENTUM VP versions R5.01.00 through R5.04.20
CENTUM VP versions R6.01.00 through R6.08.00
Exaopc versions R3.72.00 through R3.79.00
Description
The issue is related to the use of hardcoded passwords for CAMS server applications in certain Yokogawa Electric products. This could allow a remote attacker to cause a server crash, including suppression of emergency signals.
Recommendations
For CENTUM VP versions R5.01.00 through R5.04.20, update to a version outside of this range to mitigate the risk.
For CENTUM VP versions R6.01.00 through R6.08.00, update to a version outside of this range to mitigate the risk.
For Exaopc versions R3.72.00 through R3.79.00, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to the CAMS server applications until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾