CVE:CVE-2018-16196
CNNVD:CNNVD-201901-077
Yokogawa CENTUM CS 3000等都是都是日本横河电机（Yokogawa）公司的产品。Yokogawa CENTUM CS 3000是一套大型生产控制系统。Exaopc是一款OPC数据访问服务器。Vnet/IP Open Communication Driver是其中的一个开放式通信驱动程序。
多款Yokogawa产品中的Vnet/IP Open Communication Driver存在安全漏洞。攻击者可利用该漏洞造成该驱动程序的通信功能停止服务。以下产品和版本受到影响：Yokogawa CENTUM CS 3000(R3.05.00版本至R3.09.50版本)；CENTUM CS 3000 Entry Class(R3.05.00版本至R3.09.50版本)；CENTUM VP(R4.01.00版本至R6.03.10版本)；CENTUM VP Entry Class(R4.01.00版本至R6.03.10版本)；Exaopc(R3.10.00版本至R3.75.00版本)；PRM(R2.06.00版本至R3.31.00版本)；ProSafe-RS(R1.02.00版本至R4.02.00版本)；FAST/TOOLS(R9.02.00版本至R10.02.00版本)；B/M9000 VP(R6.03.01版本至R8.01.90版本)。
solution:Upgrade yokogawa centum_cs_3000_firmware to a higher version than r3.09.50,and avoid the version [r3.05.00,r3.09.50]; Upgrade yokogawa centum_cs_3000_entry_class to a higher version than r3.09.50,and avoid the version [r3.05.00,r3.09.50]; Upgrade yokogawa centum_vp_firmware to a higher version than r6.03.10,and avoid the version [r4.01.00,r6.03.10]; Upgrade yokogawa centum_vp_entry_class to a higher version than r6.03.10,and avoid the version [r4.01.00,r6.03.10]; Upgrade yokogawa b/m9000_vp to a higher version than r8.01.90,and avoid the version [r6.03.01,r8.01.90]; Upgrade yokogawa exaopc to a higher version than r3.75.00,and avoid the version [r3.10.00,r3.75.00]; Upgrade yokogawa fast/tools to a higher version than r10.02.00,and avoid the version [r9.02.00,r10.02.00]; Upgrade yokogawa plant_resource_manager to a higher version than r3.31.00,and avoid the version [r2.06.00,r3.31.00]; Upgrade yokogawa prosafe-rs to a higher version than r4.02.00,and avoid the version [r1.02.00,r4.02.00]