CVE-2022-30707
published 2022-06-28CVE-2022-30707: Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed…
PriorityP348high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.58%
43.3th percentile
Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed (CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00), CENTUM series where CAMS function is used (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R4.01.00 to R4.03.00), CENTUM series regardless of the use of CAMS function (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R5.01.00 to R5.04.20 and R6.01.00 to R6.09.00), Exaopc R3.72.00 to R3.80.00 (only if NTPF100-S6 'For CENTUM VP Support CAMS for HIS' is installed), B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01). If an adjacent attacker successfully compromises a computer using CAMS for HIS software, they can use credentials from the compromised machine to access data from another machine using CAMS for HIS software. This can lead to a disabling of CAMS for HIS software functions on any affected machines, or information disclosure/alteration.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| yokogawa | b_m9000_vp | r6.01.01 – r8.03.01 | — |
| yokogawa | b_m9000cs | r5.04.01 – r5.05.01 | — |
| yokogawa | centum_cs_3000_entry_class_firmware | r3.08.10 – r3.09.00 | — |
| yokogawa | centum_cs_3000_firmware | r3.08.10 – r3.09.00 | — |
| yokogawa | centum_vp_entry_class_firmware | r4.01.00 – r4.03.00 | — |
| yokogawa | centum_vp_entry_class_firmware | r5.01.00 – r5.04.20 | — |
| yokogawa | centum_vp_entry_class_firmware | r6.01.00 – r6.09.00 | — |
| yokogawa | centum_vp_firmware | r4.01.00 – r4.03.00 | — |
| yokogawa | centum_vp_firmware | r5.01.00 – r5.04.20 | — |
| yokogawa | centum_vp_firmware | r6.01.00 – r6.09.00 | — |
| yokogawa | exaopc | r3.72.00 – r3.80.00 | — |
| yokogawa_electric_corporation | cams_for_his | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.4MEDIUMAV:A/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Yokogawa CAMS for HIS
cisa_ics·2022-06-23
Yokogawa CAMS for HIS
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Yokogawa CAMS for HIS
Last RevisedJune 23, 2022
Alert CodeICSA-22-174-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 6.4
- ATTENTION: High attack complexity
- Vendor: Yokogawa
- Equipment: Consolidation Alarm Management Software for Human Interface Station (CAMS for HIS)
- Vulnerability: Violation of Secure Design Principles
## 2. RISK EVALUATION
If a computer using CAMS for HIS software is compromised, it can be used to compromise any number of other computers using CAMS for HIS software with the potential to crash any affected software.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PR
GHSA
GHSA-7gxw-4vp5-4rw9: Violation of secure design principles exists in the communication of CAMS for HIS
ghsa_unreviewed·2022-06-29
CVE-2022-30707 [HIGH] GHSA-7gxw-4vp5-4rw9: Violation of secure design principles exists in the communication of CAMS for HIS
Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed (CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00), CENTUM series where CAMS function is used (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R4.01.00 to R4.03.00), CENTUM series regardless of the use of CAMS function (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R5.01.00 to R5.04.20 and R6.01.00 to R6.09.00), Exaopc R3.72.00 to R3.80.00 (only if NTPF100-S6 'For CENTUM VP Support CAMS for HIS' is installed), B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01). If an adjacent attacker successfully compromises a computer using CAMS for HIS software, they can use credentials from the compromised machine
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://jvn.jp/vu/JVNVU92819891/index.htmlhttps://web-material3.yokogawa.com/1/32780/files/YSAR-22-0006-E.pdfhttps://web-material3.yokogawa.com/19/32780/files/YSAR-22-0006-J.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-174-02https://jvn.jp/vu/JVNVU92819891/index.htmlhttps://web-material3.yokogawa.com/1/32780/files/YSAR-22-0006-E.pdfhttps://web-material3.yokogawa.com/19/32780/files/YSAR-22-0006-J.pdfhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-174-02
2022-06-28
Published