Yokogawa Electric vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-11833 Overview: A vulnerability has been found in FAST/TOOLS and CI Server.High 8.2 · Jun 22, 2026
• CVE-2025-66598 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.High 7.1 · Feb 9, 2026
• CVE-2025-66597 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.High 8.8 · Feb 9, 2026
• CVE-2025-66608 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.High 8.7 · Feb 8, 2026
• CVE-2025-66600 A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.High 8.8 · Feb 8, 2026
• CVE-2025-1863 Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation.Critical 9.8 · Apr 18, 2025
• CVE-2024-8110 Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer.High 7.5 · Sep 16, 2024
• CVE-2024-5650 DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation.High 8.5 · Jun 17, 2024
• CVE-2023-26593 CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information.High 7.8 · Apr 11, 2023
• CVE-2022-33939 CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consuHigh 7.5 · Aug 16, 2022
• CVE-2022-32284 Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, wHigh 7.5 · Jul 3, 2022
• CVE-2022-30997 Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administratiHigh 7.2 · Jun 28, 2022
• CVE-2022-30707 Violation of secure design principles exists in the communication of CAMS for HIS.High 8.8 · Jun 28, 2022
• CVE-2022-29519 Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent atHigh 7.5 · Jun 28, 2022
• CVE-2022-27188 OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/MHigh 7.8 · Apr 14, 2022
• CVE-2022-26034 Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP SmallCritical 9.1 · Apr 14, 2022
• CVE-2022-23402 The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.Critical 9.8 · Mar 11, 2022
• CVE-2022-23401 The following Yokogawa Electric products contain insecure DLL loading issues.High 7.8 · Mar 11, 2022
• CVE-2022-22729 CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets.High 8.8 · Mar 11, 2022
• CVE-2022-22151 CAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly neutralize log outputs: CENTUM CS 3000 versions from R3.08.10 toHigh 8.1 · Mar 11, 2022
• CVE-2022-22148 'Root Service' service implemented in the following Yokogawa Electric products creates some named pipe with improper ACL configuration.High 7.8 · Mar 11, 2022
• CVE-2022-22145 CAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to uncontrolled resource consumption.High 8.1 · Mar 11, 2022
• CVE-2022-22141 'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration.High 7.8 · Mar 11, 2022
• CVE-2022-21808 Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09High 8.8 · Mar 11, 2022
• CVE-2022-21194 The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5Critical 9.8 · Mar 11, 2022