Skip to content
Fencer Vulns
high 8.5

CVE-2024-5650 json

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation.

published 2024-06-17 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-46828

cvss
8.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 27%
public exploits
0
none known

Summary

DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account.

The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-172-01 updated cvss 8.5

Yokogawa CENTUM

  • Yokogawa CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class) >=R3.08.10, <=R3.09.50 Yokogawa CENTUM VP (Including CENTUM VP Entry Class) >=R4.01.00, <=R4.03.00, >=R5.01.00, <=R5.04.20, >=R6.01.00, <=R6.11.10
    affected: mitigation “For questions related to this report, please contact Yokogawa” contact.yokogawa.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.34% chance of exploitation in the next 30 days, higher than 27% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

  • Yokogawa Electric Corporation CENTUM CS 3000
  • Yokogawa Electric Corporation CENTUM VP
  • yokogawa centum_cs_3000
  • yokogawa centum_vp

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.