Description
An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/
Third Party Advisory x_refsource_misc
http://jvn.jp/vu/JVNVU98228725/index.html
Scores
CVSS v3
7.8
EPSS
0.0126
EPSS Percentile
65.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-428
Status
published
Products (8)
yokogawa/exaopc
r1.01.00 - r3.77.00
yokogawa/exaplog
r1.10.00 - r3.30.00
yokogawa/exaquantum
r1.10.00 - r3.02.00
yokogawa/exaquantum\/batch
r1.01.00 - r2.50.40
yokogawa/exarqe
yokogawa/exasmoc
yokogawa/ga10
r1.01.01 - r3.05.01
yokogawa/insightsuiteae
r1.01.00 - r1.06.00
Published
Dec 26, 2019
Tracked Since
Feb 18, 2026