Yokogawa Multiple Products Buffer Overflow Vulnerabilities

CVEs (3)

Remediations

• Yokogawa has released product revisions for multiple affected products that remediate the identified vulnerabilities. Yokogawa’s Security Advisory Report, YSAR-15-0003 Vulnerabilities of Communication Functions in CENTUM, and other YOKOGAWA products are available at the following URL: (http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm)
• For additional information about the vulnerabilities and to obtain Yokogawa’s product revisions, contact Yokogawa via its Security web site at: (https://plus.yokogawa.co.jp/gw/gw.po?c-id=000498)
• Yokogawa offers the following recommendations to minimize the risk associated with these vulnerabilities by applying the actions: Apply properly configured firewall between the external network and control system network to prevent external communication with the affected devices. Prevent unapproved devices from being connected to the network where vulnerable products are connected.

Affected Vendors

Affected Products (21)