07/10/2019
Please be aware of vulnerabilities related to multiple Yokogawa products according to CISA.
Affected Model: Exaopc (R1.01.00 - R3.77.00), Exaplog (R1.10.00 - R3.40.00), Exaquantum (R1.10.00 - R3.02.00), Exaquantum/Batch (R1.01.00 - R2.50.40), Exasmoc (All Revisions), Exarqe (All Revisions), GA10 (R1.01.01 - R3.05.01), InsightSuiteAE (R1.01.00 - R1.06.00)
Applicability: Used in multiple industrial control and automation systems
Protocols: NIL
Vulnerability:
Successful exploitation of this vulnerability could allow an attacker to execute malicious files. The exploitation is a low skill level and requires the attacker to have authentication credentials and successfully authenticate on the system. This vulnerability cannot be exploited remotely.
Yokogawa has provided countermeasures on the affected products.
Common Vulnerabilities & Exploits (CVE) code: CVE-2019-6008
Criticality: CVSS score of 8.4, HIGH [CVSS vector string: https://www.first.org/cvss/calculator/3.0 :3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H]
Researchers: Vendor Self-Declared
Sources:
- https://www.us-cert.gov/ics/advisories/icsa-19-274-02
- https://isssource.com/yokogawa-countermeasures-for-vulnerability/
- https://www.cybersecurity-help.cz/vdb/SB2019100204?affChecked=1
- https://web-material3.yokogawa.com/1/28032/files/YSAR-19-0003-E.pdf?_ga=2.240459584.213272689.1570352483-1565894553.1567324952
It is advised for IACS End-Users to check with the Yokogawa for further updates. It is advised for IACS End-Users to perform proper impact analysis and risk assessment prior to deploying defensive measures.
For an archived list of published threat advisory, please visit http://www.redconsa.sg/TA/index.html.
Hover over metric group names, metric names and metric values for a summary of the information in the official CVSS v3.0 Specification Document. The Specification is available in the list of links on the left, along with a User Guide providing additional scoring guidance, an Examples document of sco...
