CVE:CVE-2019-6008
CNNVD:CNNVD-201910-007
Yokogawa Exaquantum和InsightSuiteAE都是日本横河电机（Yokogawa）公司的产品。Exaquantum是一套用于过程工业的工厂信息管理系统（PIMS）。InsightSuiteAE是一套用于监视、诊断和优化工厂资产的解决方案。
多款Yokogaw产品中存在安全漏洞。攻击者可利用该漏洞执行恶意文件。以下产品及版本受到影响：Yokogaw Exaopc（R1.01.00版本至R3.77.00版本）；Exaplog（R1.10.00版本至R3.40.00版本）；Exaquantum（R1.10.00版本至R3.02.00版本；Exaquantum/Batch（R1.01.00版本至R2.50.40版本）；Exasmoc（所有版本）；Exarqe（所有版本）；GA10（R1.01.01版本至R3.05.01版本）和InsightSuiteAE（R1.01.00版本至R1.06.00版本）。
solution:Upgrade yokogawa exaopc to a higher version than r3.77.00,and avoid the version [r1.01.00,r3.77.00]; Upgrade yokogawa exaplog to a higher version than r3.30.00,and avoid the version [r1.10.00,r3.30.00]; Upgrade yokogawa exaquantum to a higher version than r3.02.00,and avoid the version [r1.10.00,r3.02.00]; Upgrade yokogawa exaquantum/batch to a higher version than r2.50.40,and avoid the version [r1.01.00,r2.50.40]; Upgrade yokogawa exarqe to a higher version than *; Upgrade yokogawa exasmoc to a higher version than *; Upgrade yokogawa ga10 to a higher version than r3.05.01,and avoid the version [r1.01.01,r3.05.01]; Upgrade yokogawa insightsuiteae to a higher version than r1.06.00,and avoid the version [r1.01.00,r1.06.00]