Vulnerability record · CVE-2019-5909 · published 13 February 2019

CVE-2019-5909: Yokogawa b\/m 9000 vp improper authentication vulnerability

Yokogawa · B\/M 9000 Vp

License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), PRM (R4.01.00 - R4.02.00), B/M9000 VP(R7.01.01 - R8.02.03)) allows remote attackers to bypass access restriction to send malicious files to the PC where License Manager Service runs via unspecified vectors.

9.8 CVSS 3.0 Critical EPSS 5.4% · top 7.6% CWE-287 · Improper authentication

9.8CVSS 3.0 base score, v2 10.0

5.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

4Affected product versions listed by NVD

6References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

B\/M 9000 Vp Yokogawa

Centum Vp Yokogawa

Prm Yokogawa

Prosafe Rs Yokogawa

References

Link	Tags
http://jvn.jp/vu/JVNVU99147082/index.html	Third Party Advisory
http://www.securityfocus.com/bid/106772	Third Party AdvisoryVDB Entry
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf	Vendor Advisory
http://jvn.jp/vu/JVNVU99147082/index.html	Third Party Advisory
http://www.securityfocus.com/bid/106772	Third Party AdvisoryVDB Entry
https://web-material3.yokogawa.com/1/20653/files/YSAR-19-0001-E.pdf	Vendor Advisory

Track CVE-2019-5909 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2022-26034Yokogawa b\/m9000 vp improper authentication vulnerabilityImproper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENT…EPSS 0.98%15 Apr 2022 8.3CVE-2014-3888Yokogawa CENTUM BKFSim_vhfd.exe stack buffer overflowBKFSim_vhfd.exe, a component of Yokogawa CENTUM CS 1000/CS 3000, CENTUM VP, Exaopc and B/M9000 products, contains a stack-based buffer overflow that …EPSS 62%analysed10 Jul 2014 8.3CVE-2014-0782Yokogawa CENTUM and related products stack buffer overflow in BKESimmgr.exeBKESimmgr.exe in the Expanded Test Functions package of multiple Yokogawa DCS products contains a stack-based buffer overflow (CWE-121) reachable via…EPSS 57%analysed16 May 2014 7.8CVE-2023-26593Yokogawa b\/m9000 vp cleartext storage of sensitive data vulnerabilityCENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or…EPSS 0.14%11 Apr 2023 7.8CVE-2022-27188Yokogawa b\/m9000 vp os command injection vulnerabilityOS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.…EPSS 0.48%15 Apr 2022 7.5CVE-2018-16196Yokogawa centum cs 3000 firmware improper input validation vulnerabilityMultiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 -…EPSS 3.3%9 Jan 2019 7.5CVE-2014-5208Yokogawa exaopc improper access control vulnerabilityBKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, a…EPSS 23%22 Dec 2014 6.5CVE-2018-8838Yokogawa b\/m9000 cs vulnerabilityA weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 an…EPSS 0.29%17 Apr 2018

Source: NIST National Vulnerability Database (record CVE-2019-5909), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.