CVEvulnerability
CVE-2022-33939
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
Affected configurations
• yokogawa centum cs 3000 cp401 firmware
• yokogawa centum cs 3000 cp451 firmware
• yokogawa centum cs 3000 cp33 firmware
• yokogawa centum cs 3000 cp345 firmware
• yokogawa centum cs 3000 cp31 firmware
• yokogawa centum vp 3000 cp401 firmware (>= r4.01.00 <= r4.03.00)
• yokogawa centum vp 3000 cp401 firmware (>= r5.01.00 < r5.04.78)
• yokogawa centum vp 3000 cp401 firmware (>= r6.01.00 < r6.03.10)
• yokogawa centum vp 3000 cp451 firmware (>= r4.01.00 <= r4.03.00)
• yokogawa centum vp 3000 cp451 firmware (>= r5.01.00 < r5.04.78)
• yokogawa centum vp 3000 cp451 firmware (>= r6.01.00 < r6.03.10)
References
- https://jvn.jp/vu/JVNVU94343729/index.html Third Party Advisory
- https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf Vendor Advisory
- https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf Vendor Advisory
- https://jvn.jp/vu/JVNVU94343729/index.html Third Party Advisory
- https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf Vendor Advisory
- https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf Vendor Advisory