CVE Vulnerability

CVE-2022-33939

CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/vu/JVNVU94343729/index.html Third Party Advisory
https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf Vendor Advisory
https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf Vendor Advisory
Configurations

Configuration 1
Information

Published : 2022-08-16 08:15

Updated : 2022-08-17 03:47

NVD link : CVE-2022-33939

Mitre link : CVE-2022-33939

Products Affected
No products.
CWE
CWE-400