CVE-2022-22141

CVE-2022-22141

Vendor Yokogawa Electric Corporation

Product CENTUM CS 3000

Weakness CWE-732

Published March 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00.

Key dates

02Disclosure timeline

March 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-22141 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/732.html

Related vulnerabilities

Identifiers

CVE CVE-2022-22141

CWE CWE-732

Affected versions

Vendor Yokogawa Electric Corporation

Product CENTUM CS 3000

Affected versions from R3.08.10 to R3.09.00

Vendor Yokogawa Electric Corporation

Product CENTUM VP

Affected versions from R4.01.00 to R4.03.00

Vendor Yokogawa Electric Corporation

Product CENTUM VP

Affected versions from R5.01.00 to R5.04.20

Vendor Yokogawa Electric Corporation

Product CENTUM VP

Affected versions from R6.01.00 to R6.08.00

Vendor Yokogawa Electric Corporation

Product Exaopc

Affected versions from R3.72.00 to R3.79.00

01Description

02Disclosure timeline

03References

04Related CVE