Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for centum_vp_3000_cp401_firmware by yokogawa

    CVE-2022-33939 (GCVE-0-2022-33939)

    Vulnerability from nvd – Published: 2022-08-16 07:00 – Updated: 2024-08-03 08:16
    VLAI
    Summary
    CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
    Severity
    No CVSS data available.
    CWE
    • Denial-of-service (DoS)
    Assigner
    Impacted products
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T08:16:15.879Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://jvn.jp/vu/JVNVU94343729/index.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CENTUM VP / CS 3000 controller FCS",
              "vendor": "Yokogawa Electric Corporation",
              "versions": [
                {
                  "status": "affected",
                  "version": "CP31, CP33, CP345, CP401, CP451"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Denial-of-service (DoS)",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-08-16T07:00:46.000Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://jvn.jp/vu/JVNVU94343729/index.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "vultures@jpcert.or.jp",
              "ID": "CVE-2022-33939",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CENTUM VP / CS 3000 controller FCS",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "CP31, CP33, CP345, CP401, CP451"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Yokogawa Electric Corporation"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Denial-of-service (DoS)"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf",
                  "refsource": "MISC",
                  "url": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf"
                },
                {
                  "name": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf",
                  "refsource": "MISC",
                  "url": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf"
                },
                {
                  "name": "https://jvn.jp/vu/JVNVU94343729/index.html",
                  "refsource": "MISC",
                  "url": "https://jvn.jp/vu/JVNVU94343729/index.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2022-33939",
        "datePublished": "2022-08-16T07:00:46.000Z",
        "dateReserved": "2022-07-08T00:00:00.000Z",
        "dateUpdated": "2024-08-03T08:16:15.879Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2022-33939 (GCVE-0-2022-33939)

    Vulnerability from cvelistv5 – Published: 2022-08-16 07:00 – Updated: 2024-08-03 08:16
    VLAI
    Summary
    CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.
    Severity
    No CVSS data available.
    CWE
    • Denial-of-service (DoS)
    Assigner
    Impacted products
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T08:16:15.879Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://jvn.jp/vu/JVNVU94343729/index.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "CENTUM VP / CS 3000 controller FCS",
              "vendor": "Yokogawa Electric Corporation",
              "versions": [
                {
                  "status": "affected",
                  "version": "CP31, CP33, CP345, CP401, CP451"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Denial-of-service (DoS)",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-08-16T07:00:46.000Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://jvn.jp/vu/JVNVU94343729/index.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "vultures@jpcert.or.jp",
              "ID": "CVE-2022-33939",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "CENTUM VP / CS 3000 controller FCS",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "CP31, CP33, CP345, CP401, CP451"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Yokogawa Electric Corporation"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Denial-of-service (DoS)"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf",
                  "refsource": "MISC",
                  "url": "https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf"
                },
                {
                  "name": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf",
                  "refsource": "MISC",
                  "url": "https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf"
                },
                {
                  "name": "https://jvn.jp/vu/JVNVU94343729/index.html",
                  "refsource": "MISC",
                  "url": "https://jvn.jp/vu/JVNVU94343729/index.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2022-33939",
        "datePublished": "2022-08-16T07:00:46.000Z",
        "dateReserved": "2022-07-08T00:00:00.000Z",
        "dateUpdated": "2024-08-03T08:16:15.879Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }