Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Yokogawa control systems can be forced offline

CVE-2018-16196 · published 7 years ago
Summary

Several Yokogawa products that use the Vnet/IP communication driver may allow a remote attacker to stop the driver from working. This can interrupt data exchange between controllers and other equipment, potentially halting plant operations. Apply the vendor's security updates or patches to restore normal communication.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
yokogawa centum_cs_3000_firmware >= r3.05.00, <= r3.09.50
cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:*
yokogawa centum_cs_3000_entry_class >= r3.05.00, <= r3.09.50
cpe:2.3:a:yokogawa:centum_cs_3000_entry_class:*:*:*:*:*:*:*:*
yokogawa centum_vp_firmware >= r4.01.00, <= r6.03.10
cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:*
yokogawa centum_vp_entry_class >= r4.01.00, <= r6.03.10
cpe:2.3:a:yokogawa:centum_vp_entry_class:*:*:*:*:*:*:*:*
yokogawa b\/m9000_vp >= r6.03.01, <= r8.01.90
cpe:2.3:a:yokogawa:b\/m9000_vp:*:*:*:*:*:*:*:*
yokogawa exaopc >= r3.10.00, <= r3.75.00
cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:*
yokogawa fast\/tools >= r9.02.00, <= r10.02.00
cpe:2.3:a:yokogawa:fast\/tools:*:*:*:*:*:*:*:*
yokogawa plant_resource_manager >= r2.06.00, <= r3.31.00
cpe:2.3:a:yokogawa:plant_resource_manager:*:*:*:*:*:*:*:*
yokogawa prosafe-rs >= r1.02.00, <= r4.02.00
cpe:2.3:a:yokogawa:prosafe-rs:*:*:*:*:*:*:*:*
Original advisory text
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENT...
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open Communication Driver's communication via unspecified vectors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published9 Jan 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-16196 · NVD
Track software like this
Free during beta