{"id":"CVE-2019-6008","aliases":["EUVD-2019-15576","GHSA-2pj7-pfh7-3h56"],"status":"published","title":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00...","description":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0126,"percentile":0.69795,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-428"],"published":"2019-12-26T15:16:49Z","modified":"2026-06-17T02:38:34Z","products":[{"vendor":"yokogawa","product":"exaopc"},{"vendor":"yokogawa","product":"exaplog"},{"vendor":"yokogawa","product":"exaquantum"},{"vendor":"yokogawa","product":"exaquantum\\/batch"},{"vendor":"yokogawa","product":"exarqe"},{"vendor":"yokogawa","product":"exasmoc"},{"vendor":"yokogawa","product":"ga10"},{"vendor":"yokogawa","product":"insightsuiteae"},{"vendor":"yokogawa electric corporation","product":"multiple yokogawa products for windows"}],"references":[{"url":"https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://jvn.jp/vu/JVNVU98228725/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6008"},{"url":"https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list"},{"url":"https://github.com/advisories/GHSA-2pj7-pfh7-3h56"}],"sources":{"cve":[{"id":"CVE-2019-6008","description":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.","status":"published","published":"2019-12-26T15:16:49Z","modified":"2024-08-04T20:09:24.05Z","updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-15576","description":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.","status":"published","published":"2019-12-26T15:16:49Z","modified":"2024-08-04T20:09:24Z","updated_at":"2026-11-03T03:06:50.297232Z"}],"ghsa":[{"id":"GHSA-2pj7-pfh7-3h56","title":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00...","description":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.","status":"published","published":"2022-05-24T17:05:06Z","modified":"2024-04-04T02:45:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:56:11.559223Z"}],"nvd":[{"id":"CVE-2019-6008","description":"An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.","status":"published","published":"2019-12-26T16:15:10.967Z","modified":"2026-06-17T02:38:34.34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:05:40.856496Z"}]}}