Yokogawa Vnet/IP Interface Package Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Vnet/IP Interface Package by Yokogawa Electric Corporation. This issue affects versions R1.07.00 and earlier of the Vnet/IP Interface Package for CENTUM VP R6 and R7. When the affected product receives maliciously crafted packets, the Vnet/IP software stack process may be terminated, disrupting communication functions and potentially leading to the execution of arbitrary programs.

Impact

Exploitation of this vulnerability can cause the Vnet/IP communication functions to stop, leading to a denial-of-service condition. Additionally, it may allow for the execution of arbitrary programs.

Remediation

Users are advised to upgrade to Vnet/IP Interface Package version R1.08.00. For assistance with the upgrade, contact your local Yokogawa supporting office.