CVE-2022-33939
Summary
| CVE | CVE-2022-33939 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-08-16 08:15:00 UTC |
| Updated | 2023-08-08 14:22:00 UTC |
| Description | CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Yokogawa | Centum Cs 3000 Cp31 | - | All | All | All |
| Operating System | Yokogawa | Centum Cs 3000 Cp31 Firmware | - | All | All | All |
| Hardware | Yokogawa | Centum Cs 3000 Cp33 | - | All | All | All |
| Operating System | Yokogawa | Centum Cs 3000 Cp33 Firmware | - | All | All | All |
| Hardware | Yokogawa | Centum Cs 3000 Cp345 | - | All | All | All |
| Operating System | Yokogawa | Centum Cs 3000 Cp345 Firmware | - | All | All | All |
| Hardware | Yokogawa | Centum Cs 3000 Cp401 | - | All | All | All |
| Operating System | Yokogawa | Centum Cs 3000 Cp401 Firmware | - | All | All | All |
| Hardware | Yokogawa | Centum Cs 3000 Cp451 | - | All | All | All |
| Operating System | Yokogawa | Centum Cs 3000 Cp451 Firmware | - | All | All | All |
| Hardware | Yokogawa | Centum Vp 3000 Cp401 | - | All | All | All |
| Operating System | Yokogawa | Centum Vp 3000 Cp401 Firmware | All | All | All | All |
| Operating System | Yokogawa | Centum Vp 3000 Cp401 Firmware | All | All | All | All |
| Hardware | Yokogawa | Centum Vp 3000 Cp451 | - | All | All | All |
| Operating System | Yokogawa | Centum Vp 3000 Cp451 Firmware | All | All | All | All |
| Operating System | Yokogawa | Centum Vp 3000 Cp451 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf | MISC | web-material3.yokogawa.com | |
| web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf | MISC | web-material3.yokogawa.com | |
| JVNVU#94343729: CENTUMコントローラーFCSにおける通信パケットの処理に不備 | MISC | jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.