What is CVE-2020-16232?

CVE-2020-16232 is a low-severity vulnerability in Yokogawa Widefield3, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 2.8/10. Published 2022-03-18.

How severe is CVE-2020-16232?

Low severity. CVSS v3 base score is 2.8 out of 10.

Buffer overflow in Yokogawa Widefield3

CVE-2020-16232

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.

Vulnerability class: Buffer Overflow

Published 2022-03-18 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 2.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L.

EPSS exploit prediction

EPSS: 0.007 (52.7th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 53rd percentile — 52.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000

Affected products

Yokogawa Widefield3 — versions R1.01

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

www.cisa.gov/uscert/ics/advisories/icsa-20-273-02 (US Government Resource, Third Party Advisory, Mitigation)
www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-repo… (Vendor Advisory)

Frequently asked questions

What is CVE-2020-16232?: CVE-2020-16232 is a low-severity vulnerability in Yokogawa Widefield3, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 2.8/10. Published 2022-03-18.
How severe is CVE-2020-16232?: Low severity. CVSS v3 base score is 2.8 out of 10.