CVEvulnerability

CVE-2014-5208

7.5 HIGH Published 2014-12-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-284

Description

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbitrary files via a STOR operation, or obtain sensitive database-location information via a PMODE operation, a different vulnerability than CVE-2014-0784.

Affected configurations

• yokogawa exaopc (<= 3.71.10) • yokogawa centum cs 3000 r3.01 • yokogawa centum cs 3000 r3.02 • yokogawa centum cs 3000 r3.03 • yokogawa centum cs 3000 r3.04 • yokogawa centum cs 3000 r3.05 • yokogawa centum cs 3000 r3.06 • yokogawa centum cs 3000 r3.07 • yokogawa centum cs 3000 r3.08 • yokogawa centum cs 3000 r3.08.50 • yokogawa centum cs 3000 r3.08.70 • yokogawa centum cs 3000 r3.09 • yokogawa centum cs 3000 r3.09.50 • yokogawa centum vp (<= r4.03.00) • yokogawa centum vp r5.01.00 • yokogawa centum vp r5.01.20 • yokogawa centum vp r5.02.00 • yokogawa centum vp r5.03.00

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References