CVE-2022-33939
High
Description
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
SeverityHigh
CVSS7.5
Exploit probability—
ProductYokogawa Centum Cs 3000 Cp401 Firmware
PublishedAug 16, 2022
First seenAug 16, 2022
How to fix
Update
- yokogawa centum_vp_3000_cp401_firmwarer5.04.78, r6.03.10 or later
- yokogawa centum_vp_3000_cp451_firmwarer5.04.78, r6.03.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yokogawa centum_cs_3000_cp401_firmware | No range specified | — |
| yokogawa centum_cs_3000_cp451_firmware | No range specified | — |
| yokogawa centum_cs_3000_cp33_firmware | No range specified | — |
| yokogawa centum_cs_3000_cp345_firmware | No range specified | — |
| yokogawa centum_cs_3000_cp31_firmware | No range specified | — |
| yokogawa centum_vp_3000_cp401_firmware | r4.01.00 ≤ v ≤ r4.03.00, r5.01.00 ≤ v < r5.04.78, r6.01.00 ≤ v < r6.03.10 | r5.04.78, r6.03.10 |
| yokogawa centum_vp_3000_cp451_firmware | r4.01.00 ≤ v ≤ r4.03.00, r5.01.00 ≤ v < r5.04.78, r6.01.00 ≤ v < r6.03.10 | r5.04.78, r6.03.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.