CVE-2022-21194CWE-798

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from…

published March 11, 2022

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

⚠️ Attention Yokogawa Electric users: some products are holding onto their default passwords, which is a recipe for disaster! Think of it like a hotel that never changes the master key after the first guests check out—anyone could waltz back in and access everything! 🔑 With these default passwords in play, an attacker could gain full access to your internal systems like a surprise guest crashing a party—potentially leading to unauthorized data manipulation or system disruptions.

Put simply

Think of it like a hotel that never changes the master key after the first guests check out—anyone could waltz back in and access everything! 🔑 This vulnerability affects CENTUM VP (versions R5.01.00 to R5.04.20 and R6.01.00 to R6.08.0) and Exaopc (versions R3.72.00 to R3.79.00), which do not require a password change from the factory settings, leaving them vulnerable to easy exploitation.

What to do

With these default passwords in play, an attacker could gain full access to your internal systems like a surprise guest crashing a party—potentially leading to unauthorized data manipulation or system disruptions. Change the default passwords of these internal Windows accounts immediately. Regular audits and strong password policies should be put in place to prevent future occurrences. Always keep your software updated to the latest versions. You've got this! With a little diligence, you'll secure your systems in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00968 · 61.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-03-11T09:10Z
EPSS history
Timeline
  • 11 MAR 09:10Z
    The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from…
    cvelistv5