by Kastro
Paper/Archive/CVE-2022-23402

CVE-2022-23402

Yokogawa Electric Corporation CENTUM VP — The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.2…

EPSS 1.0%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 62.7.627 × 2012.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00

Affected

ProductAffectedFixed inSource
CENTUM VPversions from R5.01.00 to R5.04.20–CNA
CENTUM VPversions from R6.01.00 to R6.08.00–CNA
Exaopcversions from R3.72.00 to R3.79.00–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refweb-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf