Yokogawa CENTUM and Exaopc

Risk Summary

Successful exploitation of this vulnerability could allow a local attacker to generate false system or process alarms, or block system or process alarm displays.

CVEs (1)

Remediations

• CENTUM CS 1000, CENTUM CS 3000, CENTUM CS 3000 Small - No updates will be provided as these products are at end of support. Yokogawa recommends that affected users upgrade to the latest CENTUM VP.
• CENTUM VP, CENTUM VP Small, CENTUM VP BASIC - affected users should update to version R5.04.B2 or R6.04.00.
• Exaopc - affected users should update to version R3.76.00
• B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.
• B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.
• Please see Yokogawa Security Advisory Report YSAR-18-0001

Affected Vendors

Affected Products (9)

Affected Sectors

Critical Manufacturing, Energy, Food and Agriculture