High ICSA-19-274-02 1 CVE

Yokogawa Products

Published Oct 1, 2019 · Updated Oct 1, 2019

Vendor: Yokogawa Product: Exaopc Product: Exaplog Product: Exaquantum Product: Exaquantum/Batch Product: Exarqe Product: Exasmoc Product: GA10 Product: InsightSuiteAE

Summary

Successful exploitation of this vulnerability could allow a local attacker to execute malicious files.

Vulnerabilities 1

Unscored —

CVE-2019-6008

An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog …

Yokogawa Electric Multiple Yokogawa products for Windows Windows ICS / OT

Dec 26, 2019

Revision history

2019-10-01 #1
ICSA-19-274-02 Yokogawa Products

References

ICS Advisory ICSA-19-274-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-274-02
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B