CVE-2022-27188
mediumPriorität · verfolgen · 31EPSS 0.005 · 41. PerzentilEURUUSEPSS · bewertet 2026-10-27
OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenB/M9000 VPcisa_csaf_ot
Users of Prosafe-RS: Update to R4.07.02 or later
- BehobenCENTUM VP (Including CENTUM VP Entry Class)cisa_csaf_ot
Users of Prosafe-RS: Update to R4.07.02 or later
- BehobenProSafe-RScisa_csaf_ot
Users of Prosafe-RS: Update to R4.07.02 or later
- MitigationB/M9000 VPcisa_csaf_ot
B/M9000 VP: This product is not affected by these vulnerabilities. However, this product is affected by the existence of CENTUM installed on the same PC. If CENTUM is installed, perform update, and update B/M9000 to suitable revision.
- MitigationCENTUM VP (Including CENTUM VP Entry Class)cisa_csaf_ot
B/M9000 VP: This product is not affected by these vulnerabilities. However, this product is affected by the existence of CENTUM installed on the same PC. If CENTUM is installed, perform update, and update B/M9000 to suitable revision.
- MitigationProSafe-RScisa_csaf_ot
B/M9000 VP: This product is not affected by these vulnerabilities. However, this product is affected by the existence of CENTUM installed on the same PC. If CENTUM is installed, perform update, and update B/M9000 to suitable revision.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.4–7.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (17)
Betroffene Produkte und Versionsbereiche.
- Yokogawa CENTUM VP (Including CENTUM VP Entry Class)R6.01.10 | → R6.07.10 (if P6E5000 or P6E5100 are installed)cisa_csaf_otUS
- Yokogawa CENTUM VP (Including CENTUM VP Entry Class)R6.01.10 | → R6.09.00 - (if VP6E5000 is installed)cisa_csaf_otUS
- Yokogawa Electric Corporation CENTUM VP series with VP6E5150(Graphic Builder) installed and B/M9000 VP≤ CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02enisa_euvdEU
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-22-123-01Yokogawa CENTUM and ProSafe-RS2022-05-03icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities may allow leakage/tampering of data, cause a denial-of-service condition, or allow a local attacker to execute arbitrary programs.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2022-27188/cnnvd
- https://jvn.jp/vu/JVNVU99204686/index.htmlcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-123-01cnnvd
- https://web-material3.yokogawa.com/19/32463/files/YSAR-22-0004-J.pdfPatchcnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022050401cnnvd
- https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/cnnvd
- https://jvn.jp/vu/JVNVU99204686/index.htmlenisa_euvd
- https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan