Summary
Successful exploitation of these vulnerabilities in CAMS server functions can be abused to suppress alarms, read or write files, crash the server, or execute arbitrary code.
Vulnerabilities 7
-
Unscored —
There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric product…
-
Unscored —
The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial …
-
Unscored —
Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTU…
-
Unscored —
CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource co…
-
Unscored —
CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs:…
-
Unscored —
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets…
-
Unscored —
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R…
Revision history
-
#1
ICSA-22-083-01 Yokogawa CENTUM and Exaopc
References
-
ICS Advisory ICSA-22-083-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-083-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B