Vulnerability record · CVE-2022-26034 · published 15 April 2022

CVE-2022-26034: Yokogawa b\/m9000 vp improper authentication vulnerability

Yokogawa · B\/M9000 Vp

Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to R6.09.00, CENTUM VP Basic R6.01.10 to R6.09.00, and B/M9000 VP R8.01.01 to R8.03.01 allows an attacker to use the functions provided by AD server. This may lead to leakage or tampering of data managed by AD server.

9.1 CVSS 3.1 Critical EPSS 0.98% · top 39.3% CWE-287 · Improper authentication

9.1CVSS 3.1 base score, v2 5.8

0.98%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

B\/M9000 Vp Yokogawa

Centum Vp Yokogawa

References

Link	Tags
https://jvn.jp/vu/JVNVU99204686/index.html	Third Party Advisory
https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/	Vendor Advisory
https://jvn.jp/vu/JVNVU99204686/index.html	Third Party Advisory
https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/	Vendor Advisory

Track CVE-2022-26034 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-5909Yokogawa b\/m 9000 vp improper authentication vulnerabilityLicense Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4…EPSS 5.4%13 Feb 2019 8.8CVE-2022-30707Yokogawa centum cs 3000 firmware vulnerabilityViolation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is …EPSS 0.58%28 Jun 2022 8.3CVE-2014-3888Yokogawa CENTUM BKFSim_vhfd.exe stack buffer overflowBKFSim_vhfd.exe, a component of Yokogawa CENTUM CS 1000/CS 3000, CENTUM VP, Exaopc and B/M9000 products, contains a stack-based buffer overflow that …EPSS 62%analysed10 Jul 2014 8.3CVE-2014-0782Yokogawa CENTUM and related products stack buffer overflow in BKESimmgr.exeBKESimmgr.exe in the Expanded Test Functions package of multiple Yokogawa DCS products contains a stack-based buffer overflow (CWE-121) reachable via…EPSS 57%analysed16 May 2014 7.8CVE-2023-26593Yokogawa b\/m9000 vp cleartext storage of sensitive data vulnerabilityCENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or…EPSS 0.14%11 Apr 2023 7.8CVE-2022-27188Yokogawa b\/m9000 vp os command injection vulnerabilityOS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.…EPSS 0.48%15 Apr 2022 7.5CVE-2018-16196Yokogawa centum cs 3000 firmware improper input validation vulnerabilityMultiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 -…EPSS 3.3%9 Jan 2019 7.5CVE-2014-5208Yokogawa exaopc improper access control vulnerabilityBKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, a…EPSS 23%22 Dec 2014

Source: NIST National Vulnerability Database (record CVE-2022-26034), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.