CVEvulnerability
CVE-2018-16196
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open Communication Driver's communication via unspecified vectors.
Affected configurations
• yokogawa centum cs 3000 firmware (>= r3.05.00 <= r3.09.50)
• yokogawa centum cs 3000 entry class (>= r3.05.00 <= r3.09.50)
• yokogawa centum vp firmware (>= r4.01.00 <= r6.03.10)
• yokogawa centum vp entry class (>= r4.01.00 <= r6.03.10)
• yokogawa b\/m9000 vp (>= r6.03.01 <= r8.01.90)
• yokogawa exaopc (>= r3.10.00 <= r3.75.00)
• yokogawa fast\/tools (>= r9.02.00 <= r10.02.00)
• yokogawa plant resource manager (>= r2.06.00 <= r3.31.00)
• yokogawa prosafe-rs (>= r1.02.00 <= r4.02.00)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/106442 Third Party Advisory, VDB Entry
- https://jvn.jp/vu/JVNVU93652047/index.html Third Party Advisory, VDB Entry
- https://web-material3.yokogawa.com/YSAR-18-0008-E.pdf Vendor Advisory
- http://www.securityfocus.com/bid/106442 Third Party Advisory, VDB Entry
- https://jvn.jp/vu/JVNVU93652047/index.html Third Party Advisory, VDB Entry
- https://web-material3.yokogawa.com/YSAR-18-0008-E.pdf Vendor Advisory