Yokogawa Vnet/IP Interface Package Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Vnet/IP Interface Package by Yokogawa Electric Corporation. This issue affects versions R1.07.00 and earlier of the Vnet/IP Interface Package for CENTUM VP R6 VP6C3300 and CENTUM VP R7 VP7C3300. When the affected product receives maliciously crafted packets, the Vnet/IP software stack process may be terminated, disrupting communication functions and potentially allowing arbitrary programs to be executed.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the Vnet/IP communication functions to stop and potentially allowing arbitrary programs to be executed.

Remediation

Users are advised to upgrade to Vnet/IP Interface Package version R1.08.00. For assistance with the upgrade, contact your local Yokogawa supporting office.