CVE-2022-33939: Yokogawa Centum Cs 3000 CP31 Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.

Affected products

• Yokogawa Centum Cs 3000 CP31 Firmware: affected versions not specified
• Yokogawa Centum Cs 3000 CP33 Firmware: affected versions not specified
• Yokogawa Centum Cs 3000 CP345 Firmware: affected versions not specified
• Yokogawa Centum Cs 3000 CP401 Firmware: affected versions not specified
• Yokogawa Centum Cs 3000 CP451 Firmware: affected versions not specified
• Yokogawa Centum Vp 3000 CP401 Firmware: from r4.01.00, up to and including r4.03.00; from r5.01.00, before r5.04.78 (fixed in r5.04.78); from r6.01.00, before r6.03.10 (fixed in r6.03.10)
• Yokogawa Centum Vp 3000 CP451 Firmware: from r4.01.00, up to and including r4.03.00; from r5.01.00, before r5.04.78 (fixed in r5.04.78); from r6.01.00, before r6.03.10 (fixed in r6.03.10)

Published 2022-08-16. Last modified 2026-06-17.