High ICSA-20-224-01 2 CVEs

Yokogawa CENTUM (Update A)

Published Aug 11, 2020 · Updated Jan 5, 2021 · Revision 2

Vendor: Yokogawa Product: B/M9000 VP Product: B/M9000CS Product: CENTUM CS 3000 Product: CENTUM VP Product: Exaopc

Summary

Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to send tampered communication packets or create/overwrite any file and run any commands.

Vulnerabilities 2

Unscored —

CVE-2020-5608

CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, …

Yokogawa Electric CAMS for HIS ICS / OT

Aug 5, 2020
Unscored —

CVE-2020-5609

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, …

Yokogawa Electric CAMS for HIS ICS / OT

Aug 5, 2020

Revision history

2021-01-05 #2
ICSA-20-224-01 Yokogawa CENTUM (Update A)
2020-08-11 #1
ICSA-20-224-01 Yokogawa CENTUM

References

ICS Advisory ICSA-20-224-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-224-01
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B