Known vulnerabilities in CENTUM VP Entry Class

Known vulnerabilities in CENTUM VP Entry Class

Vendor: Yokogawa

Software: CENTUM VP Entry Class

Software CPE: cpe:2.3:h:yokogawa:centum_vp_entry_class:*:*:*:*:*:*:*:*

Website: https://www.yokogawa.com/

Total vulnerabilities: 18

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU74486 - Cleartext Storage of Sensitive Information CVE-2023-26593	CWE-312	Low	No	No	R4.03.00	05.04.2023	SB2023040533
#VU64675 - Improper input validation CVE-2022-30707	CWE-20	Low	No	No	R6.09.03	27.06.2022	SB2022062704
#VU62779 - Resource Management Errors CVE-2015-0248	CWE-399	Medium	No	No	R6.08.00	04.05.2022	SB2015040802 SB2022050403
#VU62778 - Improper Authentication CVE-2022-26034	CWE-287	Low	No	No	R6.09.04	04.05.2022	SB2022050402
#VU62777 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-27188	CWE-78	Low	No	No	R5.01.00	04.05.2022	SB2022050401
#VU61684 - Uncontrolled Search Path Element CVE-2022-23401	CWE-427	Medium	No	No	R6.09	29.03.2022	SB2022032906
#VU61683 - Improper Privilege Management CVE-2022-22141	CWE-269	Low	No	No	R6.09	29.03.2022	SB2022032906
#VU61682 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-22148	CWE-78	Low	No	No	R6.09	29.03.2022	SB2022032906
#VU61680 - Resource exhaustion CVE-2022-22145	CWE-400	Medium	No	No	R6.09	29.03.2022	SB2022032906
#VU61679 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-21177	CWE-22	Medium	No	No	R6.09	29.03.2022	SB2022032906
#VU61678 - Improper Output Neutralization for Logs CVE-2022-22151	CWE-117	Medium	No	No	R6.09	29.03.2022	SB2022032906
#VU61677 - Improper Authentication CVE-2022-22729	CWE-287	Medium	No	No	R6.09	29.03.2022	SB2022032906
#VU61676 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-21808	CWE-22	Low	No	No	R6.09	29.03.2022	SB2022032906
#VU61674 - Use of Hard-coded Credentials CVE-2022-23402	CWE-798	Low	No	No	R6.09	29.03.2022	SB2022032906
#VU19590 - Improper input validation CVE-2019-0203	CWE-20	Medium	No	No	R6.08.00	31.07.2019	SB2019073104 SB2019073107 SB2019080106 and 10 more
#VU19589 - Reachable Assertion CVE-2018-11782	CWE-617	Medium	No	No	R6.08.00	31.07.2019	SB2019073104 SB2019073107 SB2019080106 and 12 more
#VU17276 - Unrestricted Upload of File with Dangerous Type CVE-2019-5909	CWE-434	Medium	No	No	-	30.01.2019	SB2019013006
#VU16788 - Resource Management Errors CVE-2018-16196	CWE-399	Low	No	No	-	04.01.2019	SB2018122118