Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-5650

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that insta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
YokogawaGroup

Description

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yokogawa Electric Corporation CENTUM CS 3000

Default version status: unknown

  • R3.08.10 to ≤ R3.09.50affected

Yokogawa Electric Corporation CENTUM VP

Default version status: unknown

  • R4.01.00 to ≤ R4.03.00affected
  • R5.01.00 to ≤ R5.04.20affected
  • R6.01.00 to ≤ R6.11.10affected

References