CVEvulnerability
CVE-2014-3888
8.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:N/AC:M/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
Affected configurations
• yokogawa exaopc (<= 3.72.00)
• yokogawa exaopc 3.71.02
• yokogawa b\/m9000cs software (<= 5.05.01)
• yokogawa b\/m9000cs
• yokogawa centum vp entry class software (<= 5.03.00)
• yokogawa centum vp entry class
• yokogawa centum vp software (<= 5.03.20)
• yokogawa centum vp software 4.03.00
• yokogawa centum vp
• yokogawa b\/m9000 vp software (<= 7.03.01)
• yokogawa b\/m9000 vp
• yokogawa centum cs 3000 software (<= 2.23.00)
• yokogawa centum cs 3000
• yokogawa centum cs 1000 software
• yokogawa centum cs 1000
• yokogawa centum cs 3000 entry class software (<= 3.09.50)
• yokogawa centum cs 3000 entry class
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01 Third Party Advisory, US Government Resource
- http://osvdb.org/show/osvdb/108756 osvdb.org
- http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html Exploit
- http://www.exploit-db.com/exploits/34009 www.exploit-db.com
- http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf Vendor Advisory
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01 Third Party Advisory, US Government Resource
- http://osvdb.org/show/osvdb/108756 osvdb.org
- http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html Exploit
- http://www.exploit-db.com/exploits/34009 www.exploit-db.com
- http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf Vendor Advisory