CVE-2019-5909

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-02-13 · updated 2026-06-17
Weakness: CWE-287

Description

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.

Affected products

Yokogawa B/M 9000 Vp: from r7.01.01 through r8.02.03
Yokogawa Electric Corporation CENTUM VP: from r5.01.00 through r6.06.00
Yokogawa PRM: from r4.01.00 through r4.02.00
Yokogawa ProSafe-RS: from r3.01.00 through r4.04.00

References

http://jvn.jp/vu/JVNVU99147082/index.html
http://www.securityfocus.com/bid/106772
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf
http://jvn.jp/vu/JVNVU99147082/index.html
http://www.securityfocus.com/bid/106772
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf

Get alerted when CVE-2019-5909 or the next vulnerability affects your stack