CVE-2019-5909
First published: Wed Feb 13 2019(Updated: )
License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.
Credit: vultures@jpcert.or.jp vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Yokogawa B\/m 9000 Vp | >=r7.01.01<=r8.02.03 | |
| Yokogawa Centum Vp | >=r5.01.00<=r6.06.00 | |
| Yokogawa Centum Vp | >=r5.01.00<=r6.06.00 | |
| Yokogawa Centum Vp | >=r5.01.00<=r6.06.00 | |
| Yokogawa Prm | >=r4.01.00<=r4.02.00 | |
| Yokogawa Prosafe-rs | >=r3.01.00<=r4.04.00 | |
| >=r7.01.01<=r8.02.03 | ||
| >=r5.01.00<=r6.06.00 | ||
| >=r5.01.00<=r6.06.00 | ||
| >=r5.01.00<=r6.06.00 | ||
| >=r4.01.00<=r4.02.00 | ||
| >=r3.01.00<=r4.04.00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-5909?
CVE-2019-5909 is a vulnerability in the License Manager Service of YOKOGAWA products, which allows remote attackers to bypass access restriction and send malicious files.
Which YOKOGAWA products are affected by CVE-2019-5909?
The YOKOGAWA products affected by CVE-2019-5909 are CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), and B/M9000 VP(R7.01.01 - R8.02.03).
What is the severity of CVE-2019-5909?
CVE-2019-5909 has a severity rating of 9.8 (Critical).
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers to bypass access restriction and send malicious files to the License Manager Service.
Are there any fixes or patches available for CVE-2019-5909?
To mitigate the vulnerability, it is recommended to apply the patches or updates provided by YOKOGAWA.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/tags
- agent/source
- vendor/yokogawa
- canonical/yokogawa b\/m 9000 vp
- version/yokogawa b\/m 9000 vp/r7.01.01
- version/yokogawa b\/m 9000 vp/r8.02.03
- canonical/yokogawa centum vp
- version/yokogawa centum vp/r5.01.00
- version/yokogawa centum vp/r6.06.00
- canonical/yokogawa prm
- version/yokogawa prm/r4.01.00
- version/yokogawa prm/r4.02.00
- canonical/yokogawa prosafe-rs
- version/yokogawa prosafe-rs/r3.01.00
- version/yokogawa prosafe-rs/r4.04.00