CVE-2022-33939

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-33939
CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/vu/JVNVU94343729/index.html Third Party Advisory
https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf Vendor Advisory
https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:h:yokogawa:centum_cs_3000_cp401:-:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_cs_3000_cp401_firmware:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:h:yokogawa:centum_cs_3000_cp451:-:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_cs_3000_cp451_firmware:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:h:yokogawa:centum_cs_3000_cp33:-:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_cs_3000_cp33_firmware:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:h:yokogawa:centum_cs_3000_cp345:-:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_cs_3000_cp345_firmware:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:h:yokogawa:centum_cs_3000_cp31:-:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_cs_3000_cp31_firmware:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:h:yokogawa:centum_vp_3000_cp401:-:*:*:*:*:*:*:*
OR cpe:2.3:o:yokogawa:centum_vp_3000_cp401_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_vp_3000_cp401_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_vp_3000_cp401_firmware:*:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:h:yokogawa:centum_vp_3000_cp451:-:*:*:*:*:*:*:*
OR cpe:2.3:o:yokogawa:centum_vp_3000_cp451_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_vp_3000_cp451_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:yokogawa:centum_vp_3000_cp451_firmware:*:*:*:*:*:*:*:*
History

No history.

Information

Published : 2022-08-16 08:15

Updated : 2023-08-08 14:22

NVD link : CVE-2022-33939

Mitre link : CVE-2022-33939

CVE.ORG link : CVE-2022-33939

JSON object : View

Products Affected

yokogawa

  • centum_cs_3000_cp401
  • centum_cs_3000_cp401_firmware
  • centum_vp_3000_cp401_firmware
  • centum_vp_3000_cp451_firmware
  • centum_cs_3000_cp31
  • centum_cs_3000_cp31_firmware
  • centum_cs_3000_cp345_firmware
  • centum_cs_3000_cp451_firmware
  • centum_vp_3000_cp401
  • centum_cs_3000_cp33_firmware
  • centum_cs_3000_cp451
  • centum_cs_3000_cp33
  • centum_vp_3000_cp451
  • centum_cs_3000_cp345
CWE
NVD-CWE-noinfo