Yokogawa

18 CVEs across 106 Yokogawa products. Browse Yokogawa vulnerabilities, severities, and proof-of-concept exploits.

Yokogawa products with known CVEs

ProductCVEs
Centum Vp31
Centum Cs 300023
Exaopc21
Centum Vp Firmware17
Centum Cs 3000 Firmware15
Fast\/tools15
Centum Vp Entry13
Centum Vp Entry Firmware13
B\/m9000 Vp11
Centum Cs 3000 Entry11
Centum Cs 3000 Entry Firmware11
B\/m9000cs9
Centum Cs 30007
Centum Cs 10006
Vnet\/ip Interface Package6
B\/m9000cs Firmware5
Centum Cs 3000 Entry Class5
Centum Vp Entry Class5
Fcj5
Fcj Firmware5
Fcn-1005
Fcn-100 Firmware5
Fcn-5005
Fcn-500 Firmware5
Fcn-Rtu5
Fcn-Rtu Firmware5
Prosafe-Rs5
Exaplog4
Exaquantum4
Exaquantum\/batch4
Exarqe4
Exasmoc4
Plant Resource Manager4
Prm4
Stardom Controllers Fcj,fcn-100,fcn-Rtu, Fcn-5004
B/m9000cs3
B/m9000 Vp3
B\/m9000 Vp Firmware3
Centum Cs 10003
Centum Cs 1000 Firmware3
Centum Cs 3000 Entry3
Centum Vp3
Centum Vp Entry3
Exapilot3
Exaquantum/batch3
Fast/tools3
Fieldmate3
Field Wireless Device Opc Server3
Field Wireless Device Opc Server3
Prosafe-Rs Firmware3
Yokogawa CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-48023Medium6.52026-02-13A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets…
CVE-2025-48022Medium6.52026-02-13A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets…
CVE-2025-48021Medium6.52026-02-13A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets…
CVE-2025-48020Medium6.52026-02-13A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets…
CVE-2025-48019Medium6.52026-02-13A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets…
CVE-2025-1924High8.22026-02-13A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets…
CVE-2025-66598High7.52026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an…
CVE-2025-66597High7.52026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithms, potentially all…
CVE-2025-66596Medium6.12026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an att…
CVE-2025-66595Medium5.42026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). Whe…
CVE-2025-66594Medium5.32026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information co…
CVE-2025-66608High7.52026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send…
CVE-2025-66607Medium5.32026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting. Users could be red…
CVE-2025-66606Critical9.62026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper…
CVE-2025-66605Medium5.32026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete a…
CVE-2025-66604Medium5.32026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This informa…
CVE-2025-66603Critical9.82026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potenti…
CVE-2025-66602Critical9.82026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that random…
CVE-2025-66601Medium6.12026-02-09A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an attacker performs…
CVE-2023-5915Medium5.32023-12-01A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to…
CVE-2023-26593High7.82023-04-11CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access th…
CVE-2022-40984Critical9.82022-10-24Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to cause the product…
CVE-2022-33939High7.52022-08-16CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource cons…
CVE-2022-32284High7.52022-07-04Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D…
CVE-2022-30997High7.22022-06-28Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrat…
CVE-2022-30707High8.82022-06-28Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed…
CVE-2022-29519High7.52022-06-28Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent a…
CVE-2022-27188High7.82022-04-15OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/…
CVE-2022-26034Critical9.12022-04-15Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Smal…
CVE-2020-16232Low2.82022-03-18In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.
CVE-2022-23402Critical9.82022-03-11The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6…
CVE-2022-23401High7.82022-03-11The following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01…
CVE-2022-22729High8.82022-03-11CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via…
CVE-2022-22151High8.12022-03-11CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 t…
CVE-2022-22148High7.82022-03-11'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration. CENTUM CS 3000 versions…
CVE-2022-22145High8.12022-03-11CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption. CENTUM CS 3000 versions from…
CVE-2022-22141High7.82022-03-11'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTU…
CVE-2022-21808High8.82022-03-11Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.0…
CVE-2022-21194Critical9.82022-03-11The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R…
CVE-2022-21177High8.12022-03-11There is a path traversal vulnerability in CAMS for HIS Log Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10…
CVE-2020-5609Critical9.82020-08-05Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Bas…
CVE-2020-5608Critical9.82020-08-05CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R…
CVE-2015-5628Critical9.82020-02-05Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CE…
CVE-2015-5627Critical9.82020-02-05Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CE…
CVE-2015-5626Critical9.82020-02-05Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CE…
CVE-2019-6008High7.82019-12-26An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10…
CVE-2019-5909Critical9.82019-02-13License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), P…
CVE-2018-16196High7.52019-01-09Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50)…
CVE-2018-0651Critical9.82019-01-09Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN…
CVE-2018-17902Medium5.32018-10-12Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management whic…
CVE-2018-17900Critical9.82018-10-12Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allo…
CVE-2018-17898High7.52018-10-12Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unau…
CVE-2018-17896High8.12018-10-12Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may al…
CVE-2018-10592Critical9.82018-07-31Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and p…
CVE-2018-8838Medium6.52018-04-17A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier…
CVE-2016-4860High7.32016-09-19Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconf…
CVE-2014-52082014-12-22BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc…
CVE-2014-72512014-12-06XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial…
CVE-2014-38882014-07-10Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00…
CVE-2014-07822014-05-16Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier…
CVE-2014-07842014-03-14Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP…
CVE-2014-07832014-03-14Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP…
CVE-2014-07812014-03-14Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP p…