high7.5
CVE-2022-33939
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource cons…
Impact
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yokogawa | Centum Cs 3000 Cp401 Firmware | All versions |
| Yokogawa | Centum Cs 3000 Cp451 Firmware | All versions |
| Yokogawa | Centum Cs 3000 Cp33 Firmware | All versions |
| Yokogawa | Centum Cs 3000 Cp345 Firmware | All versions |
| Yokogawa | Centum Cs 3000 Cp31 Firmware | All versions |
| Yokogawa | Centum Vp 3000 Cp401 Firmware | from r4.01.00 through r4.03.00 from r5.01.00 before r5.04.78 from r6.01.00 before r6.03.10 |
| Yokogawa | Centum Vp 3000 Cp451 Firmware | from r4.01.00 through r4.03.00 from r5.01.00 before r5.04.78 from r6.01.00 before r6.03.10 |
References
- NVD record
- CVE.org record
- https://jvn.jp/vu/JVNVU94343729/index.html
- https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf
- https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf
- https://jvn.jp/vu/JVNVU94343729/index.html
- https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf
- https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf