CVE:CVE-2018-8838
CNNVD:CNNVD-201804-778
Yokogawa CENTUM CS 1000等都是日本横河电机（Yokogawa）公司的大型生产控制系统。该系统主要应用于多领域工厂中。
多款Yokogawa产品中存在提权漏洞。本地攻击者可利用该漏洞使用系统的消息管理功能。以下产品和版本受到影响：Yokogawa CENTUM CS 1000；CENTUM CS 3000 R3.09.50及之前版本；CENTUM CS 3000 Small R3.09.50及之前版本；CENTUM VP R6.03.10及之前版本；CENTUM VP Small R6.03.10及之前版本；CENTUM VP Basic R6.03.10及之前版本；Exaopc R3.75.00及之前版本；B/M9000 CS；B/M9000 VP R8.01.01及之前版本。
solution:Upgrade yokogawa b/m9000_cs to a higher version than -; Upgrade yokogawa b/m9000_vp to a higher version than r8.01.01,and avoid the version (,r8.01.01]; Upgrade yokogawa centum_cs_3000 to a higher version than r3.09.50,and avoid the version (,r3.09.50]; Upgrade yokogawa centum_vp to a higher version than r6.03.10,and avoid the version (,r6.03.10]; Upgrade yokogawa exaopc to a higher version than r3.75.00,and avoid the version (,r3.75.00]