What’s Vulnerable › Vulnerabilities

CVE-2022-27188

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-15 · updated 2026-06-17
• Weakness: CWE-78

Description

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.

Affected products

• Yokogawa B/M9000 Vp: from r6.01.01 through r6.03.02
• Yokogawa Electric Corporation CENTUM VP: from r4.01.00 through r4.03.00

References

• https://jvn.jp/vu/JVNVU99204686/index.html
• https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/
• https://jvn.jp/vu/JVNVU99204686/index.html
• https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/

Get alerted when CVE-2022-27188 or the next vulnerability affects your stack