ICSA-18-102-01

icsaUScisa_csaf_ot

Yokogawa CENTUM and Exaopc

view advisory published 2018-04-12

Successful exploitation of this vulnerability could allow a local attacker to generate false system or process alarms, or block system or process alarm displays.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2018-8838USmedium6.5—
A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R…
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • MitigationB/M9000 CS

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationB/M9000 VP

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationCENTUM CS 1000

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationCENTUM CS 3000

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationCENTUM VP

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationCENTUM VP Basic

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationCENTUM VP Small

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • MitigationExaopc

    B/M9000CS - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedB/M9000 CS

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedB/M9000 VP

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedCENTUM CS 1000

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedCENTUM CS 3000

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedCENTUM VP

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedCENTUM VP Basic

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedCENTUM VP Small

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

  • FixedExaopc

    B/M9000 VP - The vulnerability does not exist in this product however, the existence of affected software on the same PC may affect alarms for this device.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan