CVE-2022-22729

State: Published
Severity: Not scored
Published: Mar 11, 2022
Updated: Aug 3, 2024
Reserved: Feb 3, 2022

Description

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.

Scores

The record has no CVSS score.

Weaknesses

CWE-302 Authentication Bypass by Assumed-Immutable Data

Affected Products

Product	Versions
CENTUM CS 3000Yokogawa Electric Corporation	versions from R3.08.10 to R3.09.00Affected
CENTUM VPYokogawa Electric Corporation	versions from R4.01.00 to R4.03.00Affected versions from R5.01.00 to R5.04.20Affected versions from R6.01.00 to R6.08.00Affected
ExaopcYokogawa Electric Corporation	versions from R3.72.00 to R3.79.00Affected

References

https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.