CVE-2022-30707

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed (CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00), CENTUM series where CAMS function is used (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R4.01.00 to R4.03.00), CENTUM series regardless of the use of CAMS function (CENTUM VP, CENTUM VP Small, and CENTUM VP Basic R5.01.00 to R5.04.20 and R6.01.00 to R6.09.00), Exaopc R3.72.00 to R3.80.00 (only if NTPF100-S6 'For CENTUM VP Support CAMS for HIS' is installed), B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01). If an adjacent attacker successfully compromises a computer using CAMS for HIS software, they can use credentials from the compromised machine to access data from another machine using CAMS for HIS software. This can lead to a disabling of CAMS for HIS software functions on any affected machines, or information disclosure/alteration.

• https://jvn.jp/vu/JVNVU92819891/index.htmlThird Party Advisory, VDB Entry
• https://web-material3.yokogawa.com/1/32780/files/YSAR-22-0006-E.pdfVendor Advisory
• https://web-material3.yokogawa.com/19/32780/files/YSAR-22-0006-J.pdfVendor Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-02Third Party Advisory, US Government Resource
• https://jvn.jp/vu/JVNVU92819891/index.htmlThird Party Advisory, VDB Entry
• https://web-material3.yokogawa.com/1/32780/files/YSAR-22-0006-E.pdfVendor Advisory
• https://web-material3.yokogawa.com/19/32780/files/YSAR-22-0006-J.pdfVendor Advisory
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-02Third Party Advisory, US Government Resource

Published

Jun 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30701An uncontrolled search path element vulnerability in Trend M…7.8
• CVE-2022-30702Trend Micro Security 2022 and 2021 (Consumer) is vulnerable …5.5
• CVE-2022-30703Trend Micro Security 2021 and 2022 (Consumer) is vulnerable …7.8
• CVE-2022-30704Improper initialization in the Intel(R) TXT SINIT ACM for so…6.7
• CVE-2022-30705Cross-Site Request Forgery (CSRF) vulnerability in Pankaj Jh…8.8
• CVE-2022-30706Open redirect vulnerability in Booked versions prior to 3.3 …6.1
• CVE-2022-30708Webmin through 1.991, when the Authentic theme is used, allo…8.8
• CVE-2022-30709Improper input validation check logic vulnerability in SECRI…5.3
• CVE-2022-3071Use after free in Tab Strip in Google Chrome on Chrome OS, L…8.8
• CVE-2022-30710Improper validation vulnerability in RemoteViews prior to SM…9.1
• CVE-2022-30711Improper validation vulnerability in FeedsInfo prior to SMR …9.1
• CVE-2022-30712Improper validation vulnerability in KfaOptions prior to SMR…9.1