Known vulnerabilities in CENTUM VP

Vendor: Yokogawa
Software: CENTUM VP
Software CPE: cpe:2.3:a:yokogawa:centum_vp:*:*:*:*:*:*:*:*
Website: https://www.yokogawa.com/
Total vulnerabilities: 24
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CENTUM VP CENTUM VP is affected by 24 known vulnerabilities: 10 medium, 14 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93005 - Improper Access Control
CVE-2024-5650		 CWE-284 Medium
No
No
 R6.11.12 21.06.2024 SB2024062116
#VU74486 - Cleartext Storage of Sensitive Information
CVE-2023-26593		 CWE-312 Low
No
No
 R4.03.00 05.04.2023 SB2023040533
#VU66584 - Resource Management Errors
CVE-2022-33939		 CWE-399 Low
No
No
 R5.04.78, R6.03.10 17.08.2022 SB2022081712
#VU64675 - Improper input validation
CVE-2022-30707		 CWE-20 Low
No
No
 R6.09.03 27.06.2022 SB2022062704
#VU62779 - Resource Management Errors
CVE-2015-0248		 CWE-399 Medium
No
No
 R6.08.00 04.05.2022 SB2015040802
SB2022050403
#VU62778 - Improper Authentication
CVE-2022-26034		 CWE-287 Low
No
No
 R6.09.04 04.05.2022 SB2022050402
#VU62777 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-27188		 CWE-78 Low
No
No
 R5.01.00 04.05.2022 SB2022050401
#VU61684 - Uncontrolled Search Path Element
CVE-2022-23401		 CWE-427 Medium
No
No
 R6.09 29.03.2022 SB2022032906
#VU61683 - Improper Privilege Management
CVE-2022-22141		 CWE-269 Low
No
No
 R6.09 29.03.2022 SB2022032906
#VU61682 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-22148		 CWE-78 Low
No
No
 R6.09 29.03.2022 SB2022032906
#VU61680 - Resource exhaustion
CVE-2022-22145		 CWE-400 Medium
No
No
 R6.09 29.03.2022 SB2022032906
#VU61679 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21177		 CWE-22 Medium
No
No
 R6.09 29.03.2022 SB2022032906
#VU61678 - Improper Output Neutralization for Logs
CVE-2022-22151		 CWE-117 Medium
No
No
 R6.09 29.03.2022 SB2022032906
#VU61677 - Improper Authentication
CVE-2022-22729		 CWE-287 Medium
No
No
 R6.09 29.03.2022 SB2022032906
#VU61676 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21808		 CWE-22 Low
No
No
 R6.09 29.03.2022 SB2022032906
#VU61674 - Use of Hard-coded Credentials
CVE-2022-23402		 CWE-798 Low
No
No
 R6.09 29.03.2022 SB2022032906
#VU61673 - Use of Hard-coded Credentials
CVE-2022-21194		 CWE-798 Low
No
No
 R6.09 29.03.2022 SB2022032906
#VU45641 - Improper Authentication
CVE-2020-5608		 CWE-287 Low
No
No
 R5.04.D1, R6.07.11 12.08.2020 SB2020081257
#VU19590 - Improper input validation
CVE-2019-0203		 CWE-20 Medium
No
No
 R6.08.00 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 10 more
#VU19589 - Reachable Assertion
CVE-2018-11782		 CWE-617 Medium
No
No
 R6.08.00 31.07.2019 SB2019073104
SB2019073107
SB2019080106
and 12 more


Showing elements 1 - 20 out of 24