Yokogawa vulnerabilities
63 vulnerabilities
Known vulnerabilities in Yokogawa products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 68 products.
Products
50 of 68- Centum Vp25 vulnerabilities
- Centum Cs 300023 vulnerabilities
- Exaopc21 vulnerabilities
- Fast\/Tools18 vulnerabilities
- Centum Vp Entry13 vulnerabilities
- B\/M9000 Vp11 vulnerabilities
- Centum Cs 3000 Entry11 vulnerabilities
- B\/M9000Cs9 vulnerabilities
- Centum Cs 10006 vulnerabilities
- Vnet\/Ip Interface Package6 vulnerabilities
- Centum Cs 3000 Entry Class5 vulnerabilities
- Centum Vp Entry Class5 vulnerabilities
- Fcj5 vulnerabilities
- Fcn 1005 vulnerabilities
- Fcn 5005 vulnerabilities
- Fcn Rtu5 vulnerabilities
- Prosafe Rs5 vulnerabilities
- Exaplog4 vulnerabilities
- Exaquantum4 vulnerabilities
- Exaquantum\/Batch4 vulnerabilities
- Plant Resource Manager4 vulnerabilities
- Prm4 vulnerabilities
- Stardom Controllers Fcj,Fcn 100,Fcn RTU, FCN 5004 vulnerabilities
- Exapilot3 vulnerabilities
- Exarqe3 vulnerabilities
- Exasmoc3 vulnerabilities
- Field Wireless Device Opc Server3 vulnerabilities
- Fieldmate3 vulnerabilities
- Scada Software \(Fast\/Tools\)3 vulnerabilities
- Stardom Fcj3 vulnerabilities
- Stardom Fcn3 vulnerabilities
- Stardom Opc Server3 vulnerabilities
- Stardom OPC Server For Windows3 vulnerabilities
- Stardom VDS3 vulnerabilities
- Versatile Data Server Software3 vulnerabilities
- B\/M9000 Vp Software2 vulnerabilities
- B\/M9000Cs Software2 vulnerabilities
- B\/M9000Vp2 vulnerabilities
- Centum Cs 1000 Software2 vulnerabilities
- Centum Cs 3000 Entry Class Software2 vulnerabilities
- Centum Cs 3000 Software2 vulnerabilities
- Centum Vp Entry Class Software2 vulnerabilities
- Centum Vp Software2 vulnerabilities
- Astplanner1 vulnerabilities
- Aw810D1 vulnerabilities
- B\/M 9000 Vp1 vulnerabilities
- B\/M9000 Cs1 vulnerabilities
- Centum Cs 3000 Cp311 vulnerabilities
- Centum Cs 3000 Cp331 vulnerabilities
- Centum Cs 3000 Cp3451 vulnerabilities
CVE-2018-16196yokogawa electric corporationmultiple yokogawa products that contain vnet/ip open communication driver+9
EPSS score3.34%
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open Communication Driver's communication via unspecified vectors.CVE-2018-0651yokogawa electric corporationthe license management function of yokogawa products+5EPSS score3.97%
Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors.CVE-2018-17896yokogawafcj_firmware+4EPSS score1.21%
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.CVE-2018-17898yokogawafcj_firmware+4EPSS score1.25%
Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable.CVE-2018-17902yokogawafcj_firmware+4EPSS score1.11%
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions.CVE-2018-17900yokogawafcj_firmware+4EPSS score1.86%
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers.CVE-2018-10592yokogawafcj_firmware+7EPSS score6.85%
Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that could allow an attacker to gain unauthorized administrative access to the device, which could result in remote code execution.CVE-2018-8838ics-certyokogawa centum and exaopc+5EPSS score0.29%
A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier, Exaopc versions R3.75.00 and earlier, B/M9000 CS all versions, and B/M9000 VP versions R8.01.01 and earlier may allow a local attacker to exploit the message management function of the system. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H).CVE-2015-5628yokogawab\/m9000_vp_firmware+24EPSS score6.72%
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to execute arbitrary code via a crafted packet.CVE-2015-5627yokogawab\/m9000_vp_firmware+24EPSS score4.17%
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (process outage) via a crafted packet.CVE-2015-5626yokogawab\/m9000_vp_firmware+24EPSS score4.17%
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (network-communications outage) via a crafted packet.CVE-2016-4860yokogawastardom_fcn\/fcjEPSS score2.65%
Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a (1) stop application program, (2) change value, or (3) modify application command.CVE-2025-1924yokogawa electric corporationvnet/ip interface package+1EPSS score0.21%
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed.
The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlierCVE-2025-48022yokogawa electric corporationvnet/ip interface package+1EPSS score0.19%
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated.
The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlierCVE-2025-48020yokogawa electric corporationvnet/ip interface package+1EPSS score0.25%
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated.
The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlierCVE-2025-48019yokogawa electric corporationvnet/ip interface package+1EPSS score0.23%
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated.
The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlierCVE-2025-48023yokogawa electric corporationvnet/ip interface package+1EPSS score0.19%
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated.
The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlierCVE-2025-48021yokogawa electric corporationvnet/ip interface package+1EPSS score0.19%
A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated.
The affected products and versions are as follows: Vnet/IP Interface Package (for CENTUM VP R6 VP6C3300, CENTUM VP R7 VP7C3300) R1.07.00 or earlierCVE-2025-66601yokogawa electric corporationfast/tools+1EPSS score0.18%
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
This product does not
specify MIME types. When an attacker performs a content sniffing attack,
malicious scripts could be executed.
The
affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to
R10.04CVE-2025-66607yokogawa electric corporationfast/tools+1EPSS score0.20%
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
The response header
contains an insecure setting. Users could be redirected to malicious sites by
an attacker.
The
affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to
R10.04