CVE-2019-5909

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2019-02-13

Last modified

2024-08-04

Weaknesses

CWE-287, CWE-302

Affected products

• B/m 9000 Vp (Yokogawa)
• Centum Vp (Yokogawa)
• Prm (Yokogawa)
• Prosafe-rs (Yokogawa)
• License Manager Service Of Yokogawa Products (Yokogawa Electric Corporation)

References

• http://jvn.jp/vu/JVNVU99147082/index.html
• http://www.securityfocus.com/bid/106772
• https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf