CVE-2022-23402: Yokogawa Electric Corporation CENTUM VP, заобикаляне

Описание

Оригинално описание

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00

Засегнати продукти

• Yokogawa Electric Corporation CENTUM VP: versions from R5.01.00 to R5.04.20; versions from R6.01.00 to R6.08.00
• Yokogawa Electric Corporation Exaopc: versions from R3.72.00 to R3.79.00

Вид слабост

• CWE-798 Use of Hard-coded Credentials

История

Други уязвимости в Yokogawa Electric Corporation CENTUM VP

• 2.1CVE-2025-7741
• 8.5CVE-2024-5650
• CVE-2022-23401
• CVE-2022-22729
• CVE-2022-22151

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-23402
• https://nvd.nist.gov/vuln/detail/CVE-2022-23402
• https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf