CVE-2024-5650: Yokogawa Electric Corporation CENTUM CS 3000

Описание

Оригинално описание

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.

Засегнати продукти

• Yokogawa Electric Corporation CENTUM CS 3000: R3.08.10 до R3.09.50
• Yokogawa Electric Corporation CENTUM VP: R4.01.00 до R4.03.00; R5.01.00 до R5.04.20; R6.01.00 до R6.11.10
• yokogawa centum_cs_3000: r3.08.10 до r3.09.50
• yokogawa centum_vp: r4.01.00 до f4.03.00

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в Yokogawa Electric Corporation CENTUM CS 3000

• 2.1CVE-2025-7741
• CVE-2022-23402
• CVE-2022-23401
• CVE-2022-22729
• CVE-2022-22151

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-5650
• https://nvd.nist.gov/vuln/detail/CVE-2024-5650
• https://web-material3.yokogawa.com/1/36044/files/YSAR-24-0002-E.pdf