by Kastro
Paper/Archive/CVE-2022-21194

CVE-2022-21194

Yokogawa Electric Corporation CENTUM VP — The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CEN…

EPSS 1.0%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 61.9.619 × 2012.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Exaopc versions from R3.72.00 to R3.79.00.

Affected

ProductAffectedFixed inSource
CENTUM VPversions from R5.01.00 to R5.04.20–CNA
CENTUM VPversions from R6.01.00 to R6.08.00–CNA
Exaopcversions from R3.72.00 to R3.79.00–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refweb-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf