CVE-2024-5650CWE-284

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation

High · published June 17, 2024

CVSS v3.1
8.5
EPSS
0%
Percentile
26.0
In the wild
Unconfirmed
What it is

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account.

The affected products and versions are as follows:

CENTUM CS 3000 R3.08.10 to R3.09.50

CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-06-17T06:21Z
EPSS history
Timeline
  • 17 JUN 06:21Z
    DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation
    cvelistv5