CVE:CVE-2020-5608
CNNVD:CNNVD-202008-165
多款Yokogawa产品中的CAMS for HIS存在安全漏洞。远程攻击者可利用该漏洞绕过身份验证并访问被修改的通信数据包。以下产品及版本受到影响：CENTUM CS 3000 (包括：CENTUM CS 3000 Small) R3.08.10版本至R3.09.50；CENTUM VP (包括：CENTUM VP Small, Basic) R4.01.00版本至R6.07.00版本；B/M9000CS R5.04.01版本至R5.05.01版本；B/M9000 VP R6.01.01版本至R8.03.01版本。
solution:Upgrade yokogawa centum_cs_3000_firmware to a higher version than r3.09.50,and avoid the version [r3.08.10,r3.09.50]; Upgrade yokogawa centum_vp_firmware to a higher version than r4.03.00,r5.04.20,r6.07.00,and avoid the version [r4.01.00,r4.03.00],[r5.01.00,r5.04.20],[r6.01.00,r6.07.00]; Upgrade yokogawa b/m9000cs_firmware to a higher version than r5.05.01,and avoid the version [r5.04.01,r5.05.01]; Upgrade yokogawa b/m9000vp_firmware to a higher version than r8.03.01,and avoid the version [r6.01.01,r8.03.01]