CVE-2022-26034 - CVE House

Back to Database

Status published Critical CVE-2022-26034

Improper authentication vulnerability in the communication protocol provided by AD...

9.1 CVSS

Vulnerability Description

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00, and B/M9000 VP R8.01.01 to R8.03.01 allows an attacker to use the functions provided by AD server. This may lead to leakage or tampering of data managed by AD server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-26034

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Yokogawa Electric Corporation

View All →

Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain...

A vulnerability has been found in FAST/TOOLS provided by Yokogawa...

A vulnerability has been found in FAST/TOOLS provided by Yokogawa...

A vulnerability has been found in FAST/TOOLS provided by Yokogawa...

A vulnerability has been found in FAST/TOOLS provided by Yokogawa...

Affected Vendor

Yokogawa Electric Corporation

View all reports →

Affected Software

CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP

Vulnerable Versions:

CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00, and B/M9000 VP R8.01.01 to R8.03.01

Timeline

Official Publish: April 15th, 2022

Last Modified: August 3rd, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.