CVE-2020-5608
First published: Wed Aug 05 2020(Updated: )
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered communication packets via unspecified vectors.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Yokogawa Centum Cs 3000 Firmware | >=r3.08.10<=r3.09.50 | |
| Yokogawa CENTUM CS 3000 | ||
| Yokogawa Centum Vp Firmware | >=r4.01.00<=r4.03.00 | |
| Yokogawa Centum Vp Firmware | >=r5.01.00<=r5.04.20 | |
| Yokogawa Centum Vp Firmware | >=r6.01.00<=r6.07.00 | |
| Yokogawa Centum Vp | ||
| Yokogawa B\/m9000cs Firmware | >=r5.04.01<=r5.05.01 | |
| Yokogawa B\/m9000cs | ||
| Yokogawa B\/m9000vp Firmware | >=r6.01.01<=r8.03.01 | |
| Yokogawa B\/m9000vp |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-5608?
CVE-2020-5608 is a vulnerability in CAMS for HIS CENTUM CS 3000, CENTUM VP, B/M9000CS, and B/M9000VP.
How severe is CVE-2020-5608?
CVE-2020-5608 has a severity score of 9.8 (Critical).
Which software versions are affected by CVE-2020-5608?
CAMS for HIS CENTUM CS 3000 (R3.08.10 to R3.09.50), CENTUM VP (R4.01.00 to R6.07.00), B/M9000CS (R5.04.01 to R5.05.01), and B/M9000VP (R6.01.01 to R8.03.01) are affected.
How can a remote unauthenticated attacker exploit CVE-2020-5608?
A remote unauthenticated attacker can exploit CVE-2020-5608 to bypass authentication and send altered commands.
Where can I find more information about CVE-2020-5608?
You can find more information about CVE-2020-5608 at the following references: [link1](https://jvn.jp/vu/JVNVU97997181/index.html), [link2](https://web-material3.yokogawa.com/1/29820/files/YSAR-20-0001-E.pdf).
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/yokogawa
- canonical/yokogawa centum cs 3000 firmware
- version/yokogawa centum cs 3000 firmware/r3.08.10
- version/yokogawa centum cs 3000 firmware/r3.09.50
- canonical/yokogawa centum cs 3000
- canonical/yokogawa centum vp firmware
- version/yokogawa centum vp firmware/r4.01.00
- version/yokogawa centum vp firmware/r4.03.00
- version/yokogawa centum vp firmware/r5.01.00
- version/yokogawa centum vp firmware/r5.04.20
- version/yokogawa centum vp firmware/r6.01.00
- version/yokogawa centum vp firmware/r6.07.00
- canonical/yokogawa centum vp
- canonical/yokogawa b\/m9000cs firmware
- version/yokogawa b\/m9000cs firmware/r5.04.01
- version/yokogawa b\/m9000cs firmware/r5.05.01
- canonical/yokogawa b\/m9000cs
- canonical/yokogawa b\/m9000vp firmware
- version/yokogawa b\/m9000vp firmware/r6.01.01
- version/yokogawa b\/m9000vp firmware/r8.03.01
- canonical/yokogawa b\/m9000vp