CVE-2022-27188: Yokogawa b/m9000 Vp

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.

Affected products

• Yokogawa b/m9000 Vp: from r6.01.01, up to and including r6.03.02
• Yokogawa Centum Vp: from r4.01.00, up to and including r4.03.00

Published 2022-04-15. Last modified 2026-06-17.