CVE-2022-23402

CRITICAL 9.8CVE-2022-23402 · Published 11/03/2022 · updated 17/06/2026

In short

CVE-2022-23402 is a CRITICAL (CVSS 9.8) vulnerability affecting exaopc (yokogawa).
Chance of exploitation in the next 30 days (EPSS): 1.00%, higher than 62.7% of all vulnerabilities.
Fix: update to r3.80.00 or later.

Package	Affected versions	Patched versions
exaopc yokogawa	`≥ r3.72.00, < r3.80.00`	`r3.80.00`

Description

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00

References

web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf · Vendor Advisory

More vulnerabilities in exaopc

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

exaopc

yokogawa

≥ r3.72.00, < r3.80.00

r3.80.00

More vulnerabilities in exaopc

See all →