EUVD-2019-15576

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Unquoted search path vulnerability in multiple Yokogawa products allowing privilege escalation via Trojan horse.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	Vulnerabilities of the OPC server Exaopc, the statistical information processing software package Exaplog, the production data management system Exaquantum, the data analysis software Exaquantum/Batch, the set of software packages for multi-parameter optimization and management Exasmoc, the quality assessment software Exarqe, the data storage software with additional features GA10, the performance reporting software InsightSuiteAE. The vulnerability exists because the path to the executable file of the service is not enclosed in quotes and contains spaces, allowing attackers to exploit their privileges and execute arbitrary code.	27 Sep 201900:00	–	bdu_fstec
Circl	CVE-2019-6008	17 Mar 202409:17	–	circl
CVE	CVE-2019-6008	26 Dec 201915:16	–	cve
Cvelist	CVE-2019-6008	26 Dec 201915:16	–	cvelist
ICS	Yokogawa Products	1 Oct 201900:00	–	ics
NVD	CVE-2019-6008	26 Dec 201916:15	–	nvd
OSV	CVE-2019-6008	26 Dec 201916:15	–	osv
Prion	Design/Logic Flaw	26 Dec 201916:15	–	prion
RedhatCVE	CVE-2019-6008	22 May 202505:21	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "b752f869-0537-3a1b-933b-9bf804c1c4b4",
        "vendor": {
          "name": "Yokogawa Electric Corporation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7b28d2bd-7a94-397f-af41-75da36de1ef4",
        "product": {
          "name": "Multiple Yokogawa products for Windows"
        },
        "product_version": "Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and  R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)"
      }
    ]
  }
]

Source	Link
yokogawa	www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/
jvn	www.jvn.jp/vu/JVNVU98228725/index.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8

CVSS 26.8

EPSS0.0126