{"id":"CVE-2022-33939","aliases":["EUVD-2022-36975","GHSA-hg36-5628-7f89"],"status":"published","title":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in...","description":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01235,"percentile":0.69258,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2022-08-16T07:00:46Z","modified":"2026-06-17T04:49:31Z","products":[{"vendor":"yokogawa","product":"centum_cs_3000_cp31_firmware"},{"vendor":"yokogawa","product":"centum_cs_3000_cp33_firmware"},{"vendor":"yokogawa","product":"centum_cs_3000_cp345_firmware"},{"vendor":"yokogawa","product":"centum_cs_3000_cp401_firmware"},{"vendor":"yokogawa","product":"centum_cs_3000_cp451_firmware"},{"vendor":"yokogawa","product":"centum_vp_3000_cp401_firmware"},{"vendor":"yokogawa","product":"centum_vp_3000_cp451_firmware"},{"vendor":"yokogawa electric corporation","product":"centum vp / cs 3000 controller fcs"}],"references":[{"url":"https://web-material3.yokogawa.com/1/33029/files/YSAR-22-0008-E.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://web-material3.yokogawa.com/19/33029/files/YSAR-22-0008-J.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/vu/JVNVU94343729/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33939"},{"url":"https://github.com/advisories/GHSA-hg36-5628-7f89"}],"sources":{"cve":[{"id":"CVE-2022-33939","description":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.","status":"published","published":"2022-08-16T07:00:46Z","modified":"2024-08-03T08:16:15.879Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-36975","description":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.","status":"published","published":"2022-08-16T07:00:46Z","modified":"2024-08-03T08:16:15Z","updated_at":"2026-11-03T03:25:29.68115Z"}],"ghsa":[{"id":"GHSA-hg36-5628-7f89","title":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in...","description":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.","status":"published","published":"2022-08-17T00:00:33Z","modified":"2023-01-29T05:05:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:45:50.827495Z"}],"nvd":[{"id":"CVE-2022-33939","description":"CENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in processing communication packets, which may lead to resource consumption. If this vulnerability is exploited, an attacker may cause a denial of service (DoS) condition in ADL communication by sending a specially crafted packet to the affected product.","status":"published","published":"2022-08-16T08:15:07.477Z","modified":"2026-06-17T04:49:31.42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:25.242752Z"}]}}