CVE-2022-22151

CVE-2022-22151

Vendor Yokogawa Electric Corporation
Product CENTUM CS 3000
Weakness CWE-117
Published March 11, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, and Exaopc versions from R3.72.00 to R3.79.00.

Key dates

02Disclosure timeline

March 11, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-6494 Aap-mcp-server: aap mcp server: log injection allows social engineering attacks via unsanitized input CVE-2025-59784 Log Pollution - Control Characters Not Escaped CVE-2024-8334 master-nan Sweet-CMS log.go LogHandler neutralization for logs CVE-2021-43410 airavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements CVE-2025-12755 Multiple vulnerabilities in IBM MQ Operator and Queue manager container images