CVE-2022-21808

Summary

Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.

Affected Software

VendorProductVersion RangeStatus
Yokogawa Electric CorporationCENTUM CS 3000versions from R3.08.10 to R3.09.00affected
Yokogawa Electric CorporationCENTUM VPversions from R4.01.00 to R4.03.00affected
Yokogawa Electric CorporationCENTUM VPversions from R5.01.00 to R5.04.20affected
Yokogawa Electric CorporationCENTUM VPversions from R6.01.00 to R6.08.00affected
Yokogawa Electric CorporationExaopcversions from R3.72.00 to R3.79.00affected

Weaknesses

  • CWE-23: CWE-23: Relative Path Traversal

ADP Enrichment

CVE Program Container

Additional References

References