CVE-2020-5609
05.08.2020, 14:15
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| yokogawa | centum_cs_3000_firmware | r3.08.10 ≤ 𝑥 ≤ r3.09.50 |
| yokogawa | centum_vp_firmware | r4.01.00 ≤ 𝑥 ≤ r4.03.00 |
| yokogawa | centum_vp_firmware | r5.01.00 ≤ 𝑥 ≤ r5.04.20 |
| yokogawa | centum_vp_firmware | r6.01.00 ≤ 𝑥 ≤ r6.07.00 |
| yokogawa | b\/m9000cs_firmware | r5.04.01 ≤ 𝑥 ≤ r5.05.01 |
| yokogawa | b\/m9000vp_firmware | r6.01.01 ≤ 𝑥 ≤ r8.03.01 |
𝑥
= Vulnerable software versions