← Back to home
ICSA-19-003-02  ·  Published 2019-01-03  ·  View on CISA ICS-CERT ↗

Yokogawa Vnet/IP Open Communication Driver

CVSS 7.5 HIGH

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to cause Vnet/IP network communications to controlled devices to become unavailable.

CVEs (1)

Remediations

  • Yokogawa recommends users of affected devices and versions update to the latest available release.
  • Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report YSAR-18-0008: denial of service (DoS) vulnerability in Vnet/IP Open Communication Driver.
  • Please see Yokogawa Security Advisory Report YSAR-18-0008 at the following location for more information
  • For questions related to this report and details regarding how to update to the newest revision, please visit the Yokogawa security website (registration required)

Affected Vendors

Yokogawa

Affected Products (9)

Yokogawa · Exaopc >= R3.10.00 | <= R3.75.00
Yokogawa · FAST/TOOLS >= R9.02.00 | <= R10.02.00
Yokogawa · CENTUM CS 3000 >= R3.05.00 | <= R3.09.50
Yokogawa · CENTUM CS 3000 Entry Class >= R3.05.00 | <= R3.09.50
Yokogawa · ProSafe-RS >= R1.02.00 | <= 4.02.00
Yokogawa · CENTUM VP Entry Class >= R4.01.00 | <= R6.03.10
Yokogawa · B/M9000 VP >= R6.03.01 | <= R8.01.90
Yokogawa · PRM >= R2.06.00 | <= R3.31.00
Yokogawa · CENTUM VP >=R4.01.00 | <= R6.03.10

Affected Sectors

Critical Manufacturing, Energy, Food and Agriculture

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more