High severity7.8NVD Advisory· Published Apr 15, 2022· Updated Jun 17, 2026

CVE-2022-27188

Description

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yokogawa/CENTUM VPllm-fuzzy
Range: R4.01.00 to R4.03.00
Yokogawa/B\/m9000 Vpllm-fuzzy
Range: R6.01.01 to R6.03.02
Yokogawa/Centum Vp Series With Vp6e5150(graphic Builder) Installed And B/m9000 Vpv5
Range: CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02

Patches

Vulnerability mechanics

References

jvn.jp/vu/JVNVU99204686/index.htmlnvdThird Party Advisory
www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000