CVE-2022-32284
First published: Mon Jul 04 2022(Updated: )
Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a remote attacker to cause denial-of-service (DoS) condition by sending a specially crafted packet.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Yokogawa Aw810d Firmware | <=r12 | |
| Yokogawa Aw810d | ||
| Yokogawa Wide Area Communication Router (for AW810D) VI461: Vnet/IP firmware (F) R12 or earlier |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://jvn.jp/vu/JVNVU95343906/index.html
- https://web-material3.yokogawa.com/1/32825/files/YSAR-22-0005-E.pdf
- https://web-material3.yokogawa.com/19/32825/files/YSAR-22-0005-J.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-02
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-181-02 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-32284.
What is the severity of CVE-2022-32284?
The severity of CVE-2022-32284 is high with a CVSS score of 7.5.
What is the affected software for CVE-2022-32284?
The affected software for CVE-2022-32284 is the YOKOGAWA Wide Area Communication Router (WAC Router) AW810D with firmware up to and including r12.
How can a remote attacker exploit this vulnerability?
A remote attacker can exploit this vulnerability by sending a specially crafted packet, which may cause a denial-of-service (DoS) condition.
Are there any available references for CVE-2022-32284?
Yes, you can find references for CVE-2022-32284 at the following links: [Reference 1](https://jvn.jp/vu/JVNVU95343906/index.html), [Reference 2 (PDF)](https://web-material3.yokogawa.com/1/32825/files/YSAR-22-0005-E.pdf), [Reference 3 (PDF)](https://web-material3.yokogawa.com/19/32825/files/YSAR-22-0005-J.pdf).
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/event
- agent/first-publish-date
- agent/description
- agent/references
- agent/severity
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/trending
- vendor/yokogawa
- canonical/yokogawa aw810d firmware
- version/yokogawa aw810d firmware/r12
- canonical/yokogawa aw810d
- canonical/yokogawa wide area communication router (for aw810d) vi461: vnet/ip firmware (f) r12 or earlier