CVE-2020-5609 - CVE House
Back to Database
Status published Critical CVE-2020-5609

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000...

Vulnerability Description

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5609

Credits & Attribution

No credits recorded in the NVD database.

References

More from Yokogawa Electric Corporation

View All →
CVE-2025-7741
Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain...
Low 2.1
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa...
High 8.7
CVE-2025-66607
A vulnerability has been found in FAST/TOOLS provided by Yokogawa...
Medium 6.3
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa...
Low 2.1
CVE-2025-66605
A vulnerability has been found in FAST/TOOLS provided by Yokogawa...
Low 2.1

Affected Vendor

Yokogawa Electric Corporation

View all reports →

Affected Software

CAMS for HIS
Vulnerable Versions:
CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01

Timeline

Official Publish: August 5th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.