sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2022-26034 Auth bypass in CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP

Critical 9.1 Published Updated

An attacker can bypass authentication in the AD server communication protocol to leak or tamper with managed data in Yokogawa CENTUM VP systems.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2022-26034?

CVE-2022-26034 is a critical authentication bypass vulnerability in Yokogawa Electric Corporation CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP, published on 15 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00, and B/M9000 VP R8.01.01 to R8.03.01 allows an attacker to use the functions provided by AD server. This may lead to leakage or tampering of data managed by AD server.

Weakness: CWE-287

Which versions are affected by CVE-2022-26034?

It affects 2 products.

Products include Yokogawa B\/M9000 Vp, Yokogawa Centum Vp.

How do I fix CVE-2022-26034?

No fix has been published for CVE-2022-26034 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-26034 being exploited?

There is no known exploitation of CVE-2022-26034 in the wild and no public exploit code.

Sources

Also known as GHSA-6r8v-ww3c-grvh.

Is CVE-2022-26034 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free