Yokogawa CENTUM VP
view advisory published 2026-04-02
Successful exploitation of this vulnerability could allow an attacker to login as the PROG user and modify permissions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-7741US | —OT elevated | — | ||
Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain a hardcoded password for the user account (PROG) used for CENTUM Authentication Mode within th… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-092-02 JSONself
- ICSA Advisory ICSA-26-092-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationCENTUM VP
Yokogawa recommends users applying the following mitigations to affected versions:
- FixedCENTUM VP
CENTUM VP R5.01.00 to R5.04.20: Change the user authentication mode to Windows Authentication Mode.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan