High severity · published Dec 26, 2019
CVE-2019-6008
An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and…
7.8
CVSS
1.3%
EPSS
No
On KEV
Description
An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EX
Exaopc · Yokogawa
r1.01.00 through r3.77.00 · source: NVD
EX
Exaplog · Yokogawa
r1.10.00 through r3.30.00 · source: NVD
EX
Exaquantum · Yokogawa
r1.10.00 through r3.02.00 · source: NVD
EX
Exaquantum/batch · Yokogawa
r1.01.00 through r2.50.40 · source: NVD
EX
Exarqe · Yokogawa
All versions, or not specified · source: NVD
EX
Exasmoc · Yokogawa
All versions, or not specified · source: NVD
GA
Ga10 · Yokogawa
r1.01.01 through r3.05.01 · source: NVD
IN
Insightsuiteae · Yokogawa
r1.01.00 through r1.06.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6008
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6008
Third Party Advisory
http://jvn.jp/vu/JVNVU98228725/index.html
Vendor Advisory
https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/
More from Exaopc
9.8
CVE-2022-23402
The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00,…
9.8
CVE-2022-21194
The following Yokogawa Electric products do not change the passwords of the internal Windows accounts from the initial configuration: CENTUM VP versions from R5.01.00 to R5.04.20…
9.8
CVE-2015-5628
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
9.8
CVE-2015-5627
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
9.8
CVE-2015-5626
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…