CVE-2022-30707 Details
Description
Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed (CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00), CENTUM series where CAMS function is used (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R4.01.00 to R4.03.00), CENTUM series regardless of the use of CAMS function (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R5.01.00 to R5.04.20 and R6.01.00 to R6.09.00), Exaopc R3.72.00 to R3.80.00 (only if NTPF100-S6 'For CENTUM VP Support CAMS for HIS' is installed), B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01). If an adjacent attacker successfully compromises a computer using CAMS for HIS software, they can use credentials from the compromised machine to access data from another machine using CAMS for HIS software. This can lead to a disabling of CAMS for HIS software functions on any affected machines, or information disclosure/alteration.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jvn.jp/vu/JVNVU92819891/index.html | CVE | Third Party AdvisoryVDB Entry |
| https://web-material3.yokogawa.com/1/32780/files/YSAR-22-0006-E.pdf | CVE | Vendor Advisory |
| https://web-material3.yokogawa.com/19/32780/files/YSAR-22-0006-J.pdf | CVE | Vendor Advisory |
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-02 | CVE | Third Party AdvisoryUS Government Resource |
| https://jvn.jp/vu/JVNVU92819891/index.html | [email protected] | Third Party AdvisoryVDB Entry |
| https://web-material3.yokogawa.com/1/32780/files/YSAR-22-0006-E.pdf | [email protected] | Vendor Advisory |
| https://web-material3.yokogawa.com/19/32780/files/YSAR-22-0006-J.pdf | [email protected] | Vendor Advisory |
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-02 | [email protected] | Third Party AdvisoryUS Government Resource |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| yokogawa centum cs 3000 firmware | >= r3.08.10, <= r3.09.00 |
CPE
Remediation
| |
| yokogawa centum cs 3000 | All versions |
CPE
Remediation
| |
| yokogawa centum cs 3000 entry class firmware | >= r3.08.10, <= r3.09.00 |
CPE
Remediation
| |
| yokogawa centum cs 3000 entry class | All versions |
CPE
Remediation
| |
| yokogawa centum vp firmware | >= r4.01.00, <= r4.03.00 >= r5.01.00, <= r5.04.20 >= r6.01.00, <= r6.09.00 |
CPE
Remediation
| |
| yokogawa centum vp | All versions |
CPE
Remediation
| |
| yokogawa centum vp entry class firmware | >= r4.01.00, <= r4.03.00 >= r5.01.00, <= r5.04.20 >= r6.01.00, <= r6.09.00 |
CPE
Remediation
| |
| yokogawa centum vp entry class | All versions |
CPE
Remediation
| |
| yokogawa exaopc | >= r3.72.00, <= r3.80.00 |
CPE
Remediation
| |
| yokogawa b/m9000 vp | >= r6.01.01, <= r8.03.01 |
CPE
Remediation
| |
| yokogawa b/m9000cs | >= r5.04.01, <= r5.05.01 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 8, 2023 | CWE Remap | [email protected] |
| Jul 14, 2022 | Initial Analysis | [email protected] |