CVE-2019-5909

CRITICO 9.8CVE-2019-5909 · Published 13/02/2019 · updated 17/06/2026

In breve

CVE-2019-5909 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda b/m 9000 vp (yokogawa), centum vp (yokogawa), prm (yokogawa).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.4%, superiore al 92.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
b/m 9000 vp yokogawa	`≥ r7.01.01, ≤ r8.02.03`	No fix yet
centum vp yokogawa	`≥ r5.01.00, ≤ r6.06.00`	No fix yet
prm yokogawa	`≥ r4.01.00, ≤ r4.02.00`	No fix yet
prosafe-rs yokogawa	`≥ r3.01.00, ≤ r4.04.00`	No fix yet

Description

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.

References

jvn.jp/vu/JVNVU99147082/index.html · Third Party Advisory
securityfocus.com/bid/106772 · Third Party Advisory
web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free