10

CVE-2019-5909

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yokogawa ≫ B/m 9000 Vp Version >= r7.01.01 <= r8.02.03
Yokogawa ≫ Centum Vp Version >= r5.01.00 <= r6.06.00
Yokogawa ≫ Centum Vp SwEditionbasic Version >= r5.01.00 <= r6.06.00
Yokogawa ≫ Centum Vp SwEditionsmall Version >= r5.01.00 <= r6.06.00
Yokogawa ≫ Prm Version >= r4.01.00 <= r4.02.00
Yokogawa ≫ Prosafe-rs Version >= r3.01.00 <= r4.04.00
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.71% 0.93
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/106772
Third Party Advisory
VDB Entry