Yokogawa License Manager Service
Successful exploitation of this vulnerability could allow an attacker to remotely upload files, allowing execution of arbitrary code.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-5909US | critical9.8 | — | ||
License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- MitigationB/M9000 VP
Yokogawa recommends users of affected devices and versions update to the latest available release. Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report “YSAR-198-0001: Vulnerability of access control in License Manager Service of Yokogawa products.” This advisory can be found at the following location:https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdfFor questions related to this report and details regarding how to update to the newest revision, please visit the Yokogawa security website (registration required): https://contact.yokogawa.com/cs/gw?c-id=000498
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf - MitigationCENTUM VP
Yokogawa recommends users of affected devices and versions update to the latest available release. Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report “YSAR-198-0001: Vulnerability of access control in License Manager Service of Yokogawa products.” This advisory can be found at the following location:https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdfFor questions related to this report and details regarding how to update to the newest revision, please visit the Yokogawa security website (registration required): https://contact.yokogawa.com/cs/gw?c-id=000498
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf - MitigationCENTUM VP Entry Class
Yokogawa recommends users of affected devices and versions update to the latest available release. Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report “YSAR-198-0001: Vulnerability of access control in License Manager Service of Yokogawa products.” This advisory can be found at the following location:https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdfFor questions related to this report and details regarding how to update to the newest revision, please visit the Yokogawa security website (registration required): https://contact.yokogawa.com/cs/gw?c-id=000498
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf - MitigationPRM
Yokogawa recommends users of affected devices and versions update to the latest available release. Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report “YSAR-198-0001: Vulnerability of access control in License Manager Service of Yokogawa products.” This advisory can be found at the following location:https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdfFor questions related to this report and details regarding how to update to the newest revision, please visit the Yokogawa security website (registration required): https://contact.yokogawa.com/cs/gw?c-id=000498
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf - MitigationProSafe-RS
Yokogawa recommends users of affected devices and versions update to the latest available release. Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report “YSAR-198-0001: Vulnerability of access control in License Manager Service of Yokogawa products.” This advisory can be found at the following location:https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdfFor questions related to this report and details regarding how to update to the newest revision, please visit the Yokogawa security website (registration required): https://contact.yokogawa.com/cs/gw?c-id=000498
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan