TI-2018-11593 Aliases CVE-2018-16196 GHSA-r9jm-c64m-grf2

Improper input validation in Yokogawa Electric Corporation Multiple Yokogawa products…

LOW 39CWE-20Published 2019-01-09 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) allows remote attackers to cause a denial of service attack that may result in stopping Vnet/IP Open Communication Driver's communication via unspecified vectors.

Why it matters now

EPSS 0.03342 88th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Yokogawa Electric Corporation	Multiple Yokogawa products that contain Vnet/IP Open Communication Driver	(CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90))	—	No fix listed	CNA

Multiple Yokogawa products that contain Vnet/IP Open Communication Driver VendorYokogawa Electric Corporation Affected (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00 - R6.03.10), CENTUM VP Entry Class(R4.01.00 - R6.03.10), Exaopc(R3.10.00 - R3.75.00), PRM(R2.06.00 - R3.31.00), ProSafe-RS(R1.02.00 - R4.02.00), FAST/TOOLS(R9.02.00 - R10.02.00), B/M9000 VP(R6.03.01 - R8.01.90)) Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPE	Versions	Role	Vendor
cpe:2.3:o:yokogawa:centum_cs_3000_firmware::::::::	r3.05.00 – r3.09.50	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_cs_3000:-:::::::*	not specified by NVD	Running on	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000_entry_class::::::::	r3.05.00 – r3.09.50	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:o:yokogawa:centum_vp_firmware::::::::	r4.01.00 – r6.03.10	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_vp:-:::::::*	not specified by NVD	Running on	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp_entry_class::::::::	r4.01.00 – r6.03.10	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:b\/m9000_vp::::::::	r6.03.01 – r8.01.90	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:exaopc::::::::	r3.10.00 – r3.75.00	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:fast\/tools::::::::	r9.02.00 – r10.02.00	Vulnerable	Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:plant_resource_manager::::::::	r2.06.00 – r3.31.00	Vulnerable	Yokogawa Electric Corporation

cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:* Versions r3.05.00 – r3.09.50 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_cs_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000_entry_class:*:*:*:*:*:*:*:* Versions r3.05.00 – r3.09.50 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:* Versions r4.01.00 – r6.03.10 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_vp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp_entry_class:*:*:*:*:*:*:*:* Versions r4.01.00 – r6.03.10 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:b\/m9000_vp:*:*:*:*:*:*:*:* Versions r6.03.01 – r8.01.90 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:* Versions r3.10.00 – r3.75.00 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:fast\/tools:*:*:*:*:*:*:*:* Versions r9.02.00 – r10.02.00 Vulnerable ·Yokogawa Electric Corporation
cpe:2.3:a:yokogawa:plant_resource_manager:*:*:*:*:*:*:*:* Versions r2.06.00 – r3.31.00 Vulnerable ·Yokogawa Electric Corporation

Show 1 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:yokogawa:prosafe-rs::::::::	r1.02.00 – r4.02.00	Vulnerable	Yokogawa Electric Corporation

cpe:2.3:a:yokogawa:prosafe-rs:*:*:*:*:*:*:*:* Versions r1.02.00 – r4.02.00 Vulnerable ·Yokogawa Electric Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-16196
2026-10-03 Alias added: GHSA-r9jm-c64m-grf2

References

Advisory 2

TI-2014-03162 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000… CVSS 2.0HIGH 8.3
TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
TI-2022-09520 Improper authentication in Yokogawa Electric Corporation CENTUM VP series with VP6E5000… CVSS 3.1CRITICAL 9.1
TI-2022-12843 Violation of secure design principles exists in the communication of CAMS for HIS. CVSS 3.1HIGH 8.8
TI-2023-11727 Cleartext storage of sensitive information in Yokogawa Electric Corporation CENTUM series CVSS 3.1HIGH 7.8
TI-2022-10311 OS command injection in Yokogawa Electric Corporation CENTUM VP series with VP6E5150… CVSS 3.1HIGH 7.8

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences