CVE-2022-21194 - AskarLabs CVE Database

CVE-2022-21194

Vendor Yokogawa Electric Corporation

Product CENTUM VP

Weakness CWE-798 · Hardcoded credentials

Published March 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.0, Exaopc versions from R3.72.00 to R3.79.00.

Key dates

02Disclosure timeline

March 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-21194 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/798.html

Identifiers

CVE CVE-2022-21194

CWE CWE-798

Affected versions

Vendor Yokogawa Electric Corporation

Product CENTUM VP

Affected versions from R5.01.00 to R5.04.20

Vendor Yokogawa Electric Corporation

Product CENTUM VP

Affected versions from R6.01.00 to R6.08.00

Vendor Yokogawa Electric Corporation

Product Exaopc

Affected versions from R3.72.00 to R3.79.00