Known vulnerabilities in CENTUM CS 3000

Vendor: Yokogawa
Software: CENTUM CS 3000
Software CPE: cpe:2.3:a:yokogawa:centum_cs_3000:*:*:*:*:*:*:*:*
Website: https://www.yokogawa.com/
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CENTUM CS 3000 CENTUM CS 3000 is affected by 20 known vulnerabilities: 3 high, 6 medium, 11 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93005 - Improper Access Control
CVE-2024-5650		 CWE-284 Medium
No
No
 - 21.06.2024 SB2024062116
#VU74486 - Cleartext Storage of Sensitive Information
CVE-2023-26593		 CWE-312 Low
No
No
 - 05.04.2023 SB2023040533
#VU66584 - Resource Management Errors
CVE-2022-33939		 CWE-399 Low
No
No
 - 17.08.2022 SB2022081712
#VU64675 - Improper input validation
CVE-2022-30707		 CWE-20 Low
No
No
 - 27.06.2022 SB2022062704
#VU61684 - Uncontrolled Search Path Element
CVE-2022-23401		 CWE-427 Medium
No
No
 - 29.03.2022 SB2022032906
#VU61683 - Improper Privilege Management
CVE-2022-22141		 CWE-269 Low
No
No
 - 29.03.2022 SB2022032906
#VU61682 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-22148		 CWE-78 Low
No
No
 - 29.03.2022 SB2022032906
#VU61680 - Resource exhaustion
CVE-2022-22145		 CWE-400 Medium
No
No
 - 29.03.2022 SB2022032906
#VU61679 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21177		 CWE-22 Medium
No
No
 - 29.03.2022 SB2022032906
#VU61678 - Improper Output Neutralization for Logs
CVE-2022-22151		 CWE-117 Medium
No
No
 - 29.03.2022 SB2022032906
#VU61677 - Improper Authentication
CVE-2022-22729		 CWE-287 Medium
No
No
 - 29.03.2022 SB2022032906
#VU61676 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21808		 CWE-22 Low
No
No
 - 29.03.2022 SB2022032906
#VU61674 - Use of Hard-coded Credentials
CVE-2022-23402		 CWE-798 Low
No
No
 - 29.03.2022 SB2022032906
#VU45642 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5609		 CWE-22 Low
No
No
 - 12.08.2020 SB2020081257
#VU45641 - Improper Authentication
CVE-2020-5608		 CWE-287 Low
No
No
 - 12.08.2020 SB2020081257
#VU16788 - Resource Management Errors
CVE-2018-16196		 CWE-399 Low
No
No
 - 04.01.2019 SB2018122118
#VU11832 - Permissions, Privileges, and Access Controls
CVE-2018-8838		 CWE-264 Low
No
No
 - 16.04.2018 SB2018041603
#VU41922 - Heap-based Buffer Overflow
CVE-2014-0781		 CWE-122 High
Available
No
 - 14.03.2014 SB2014031414
#VU41923 - Stack-based buffer overflow
CVE-2014-0783		 CWE-121 High
Available
No
 - 14.03.2014 SB2014031414
#VU41924 - Stack-based buffer overflow
CVE-2014-0784		 CWE-121 High
Available
No
 - 14.03.2014 SB2014031414