Vulnerability in Ics-Cert Yokogawa Centum And Exaopc

CVE-2018-8838

A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions R6.03.10 and earlier, CENTUM VP Small versions R6.03.10 and earlier, CENTUM VP Basic versions R6.03.10 and earlier, Exaopc versions R3.75.00 and earlier, B/M9000 CS all versions, and B/M9000 VP versions R8.01.01 and earlier may allow a local attacker to exploit the message management function of the system. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H).

Published · last modified .

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (21.3th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 21st percentile — 21.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2018-8838: held from 0.003 to 0.003.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

References

Frequently asked questions

What is CVE-2018-8838?
CVE-2018-8838 is a medium-severity vulnerability in Ics-Cert Yokogawa Centum And Exaopc. CVSS score: 6.5/10. Published 2018-04-17.
How severe is CVE-2018-8838?
Medium severity. CVSS v3 base score is 6.5 out of 10.