U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2015-5628

Change History

Initial Analysis by NIST 2/12/2020 3:16:13 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:b\/m9000_vp_firmware:*:*:*:*:*:*:*:* versions up to (including) r7.03.04
     OR
          cpe:2.3:h:yokogawa:b\/m9000_vp:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:b\/m9000cs_firmware:*:*:*:*:*:*:*:* versions up to (including) r5.05.01
     OR
          cpe:2.3:h:yokogawa:b\/m9000cs:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:centum_cs_1000_firmware:*:*:*:*:*:*:*:* versions up to (including) r3.08.70
     OR
          cpe:2.3:h:yokogawa:centum_cs_1000:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:centum_cs_3000_entry_firmware:*:*:*:*:*:*:*:* versions up to (including) r3.09.50
     OR
          cpe:2.3:h:yokogawa:centum_cs_3000_entry:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:* versions up to (including) r3.09.50
     OR
          cpe:2.3:h:yokogawa:centum_cs_3000:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:centum_vp_entry_firmware:*:*:*:*:*:*:*:* versions up to (including) r5.04.20
     OR
          cpe:2.3:h:yokogawa:centum_vp_entry:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:* versions up to (including) r5.04.20
     OR
          cpe:2.3:h:yokogawa:centum_vp:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:field_wireless_device_opc_server:*:*:*:*:*:*:*:* versions up to (including) r2.01.02
     OR
          cpe:2.3:h:yokogawa:field_wireless_device_opc_server:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:prosafe-rs_firmware:*:*:*:*:*:*:*:* versions up to (including) r3.02.10
     OR
          cpe:2.3:h:yokogawa:prosafe-rs:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:yokogawa:stardom_opc_server:*:*:*:*:*:windows:*:* versions up to (including) r3.40
     OR
          cpe:2.3:h:yokogawa:stardom_opc_server:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:* versions up to (including) r3.72.00
     *cpe:2.3:a:yokogawa:exapilot:*:*:*:*:*:*:*:* versions up to (including) r3.96.10
     *cpe:2.3:a:yokogawa:exaplog:*:*:*:*:*:*:*:* versions up to (including) r3.40.00
     *cpe:2.3:a:yokogawa:exaquantum:*:*:*:*:*:*:*:* versions up to (including) r2.85.00
     *cpe:2.3:a:yokogawa:exaquantum\/batch:*:*:*:*:*:*:*:* versions up to (including) r2.50.30
     *cpe:2.3:a:yokogawa:exarqe:*:*:*:*:*:*:*:* versions up to (including) r4.03.20
     *cpe:2.3:a:yokogawa:exasmoc:*:*:*:*:*:*:*:* versions up to (including) r4.03.20
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:yokogawa:fieldmate:r1.01:*:*:*:*:*:*:*
     *cpe:2.3:a:yokogawa:fieldmate:r1.02:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:yokogawa:plant_resource_manager:*:*:*:*:*:*:*:* versions up to (including) r3.12.00
     *cpe:2.3:a:yokogawa:scada_software_\(fast\/tools\):*:*:*:*:*:*:*:* versions up to (including) r10.01
     *cpe:2.3:a:yokogawa:versatile_data_server_software:*:*:*:*:*:*:*:* versions up to (including) r7.30.01
Added CVSS V2

								
							
							
						
NIST (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
NIST CWE-787
Changed Reference Type
http://www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf No Types Assigned
http://www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf Not Applicable
Changed Reference Type
https://ics-cert.us-cert.gov/advisories/ICSA-15-253-01 No Types Assigned
https://ics-cert.us-cert.gov/advisories/ICSA-15-253-01 Mitigation, Third Party Advisory, US Government Resource