← CVE Intelligence

CVE-2024-5650

Yokogawa Electric Corporation / CENTUM CS 3000 PUBLISHED

Description (CNA)

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.

Affected (CNA)

Vendor / productVersions
Yokogawa Electric Corporation / CENTUM CS 3000affected R3.08.10 through R3.09.50
Yokogawa Electric Corporation / CENTUM VPaffected R4.01.00 through R4.03.00; affected R5.01.00 through R5.04.20; affected R6.01.00 through R6.11.10

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.