High ICSA-22-123-01 5 CVEs

Yokogawa CENTUM and ProSafe-RS

Published May 3, 2022 · Updated May 3, 2022

Vendor: Yokogawa Product: B/M9000 VP Product: CENTUM VP (Including CENTUM VP Entry Class) Product: ProSafe-RS

Summary

Successful exploitation of these vulnerabilities may allow leakage/tampering of data, cause a denial-of-service condition, or allow a local attacker to execute arbitrary programs.

Vulnerabilities 5

Unscored —

CVE-2015-0248 EPSS 13%

The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote a…

subversion subversion Debian Ubuntu

Apr 8, 2015
Unscored —

CVE-2018-11782

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit…

subversion subversion subversion Debian Ubuntu Alpine

Sep 26, 2019
Unscored —

CVE-2019-0203

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit…

subversion subversion subversion Debian Ubuntu Alpine

Sep 26, 2019
Unscored —

CVE-2022-26034

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM…

Yokogawa Electric CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP ICS / OT

Apr 15, 2022
Unscored —

CVE-2022-27188

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENT…

Yokogawa Electric CENTUM VP series with VP6E5150(Graphic Builder) installed and B/M9000 VP ICS / OT

Apr 15, 2022

Revision history

2022-05-03 #1
ICSA-22-123-01 Yokogawa CENTUM and ProSafe-RS

References

ICS Advisory ICSA-22-123-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-123-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B