Yokogawa CENTUM VP R6, R7

Summary

Multiple vulnerabilities have been identified in Yokogawa CENTUM VP R6 and R7 Vnet/IP Interface Packages. Successful exploitation of these vulnerabilities could allow an attacker to terminate software processes, cause a denial-of-service condition, or execute arbitrary code.

IFF Assessment

FOE

The vulnerabilities in Yokogawa CENTUM VP R6 and R7 allow for denial of service and arbitrary code execution, which are bad news for defenders.

Severity

6.9 Medium

Defender Context

These vulnerabilities in Yokogawa's control systems highlight the ongoing need for patching and mitigation in OT environments. Defenders should apply the recommended patches (R1.08.00) and monitor network traffic for malicious packets. The wide deployment across critical infrastructure sectors increases the potential impact of successful exploitation.

Read Full Story →