NetSight
high7.8

CVE-2022-22141

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration.

Impact

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.

Affected products

VendorProductAffected versions
YokogawaCentum Cs 3000 Firmware
from r3.08.10 through r3.09.00
YokogawaCentum Cs 3000 Entry Firmware
from r3.08.10 through r3.09.00
YokogawaCentum Vp Firmware
from r4.01.00 through r4.03.00
from r5.01.00 through r5.04.20
from r6.01.00 before r6.09.00
YokogawaCentum Vp Entry Firmware
from r4.01.00 through r4.03.00
from r5.01.00 through r5.04.20
from r6.01.00 before r6.09.00
YokogawaExaopc
from r3.72.00 before r3.80.00

Weakness classification

References