CVE-2022-22729CWE-302

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets

published March 11, 2022

CVSS
—
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00945 · 60.7th percentile
Weakness
CWE-302 · Authentication Bypass by Assumed-Immutable Data
Published
2022-03-11T09:10Z
EPSS history
Timeline
  • 11 MAR 09:10Z
    CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets
    cvelistv5