Login Request a demo
Unscored severity · published Mar 14, 2014
CVE-2014-0784
Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet
–
CVSS
35.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)35.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Centum CS 3000 · Yokogawa
through r3.09.50; r3.01; r3.02; r3.03; r3.04; r3.05; +6 more · source: NVD
Affected product
CC
Centum CS 3000
Yokogawa
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0784
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0784
www.securityfocus.com
http://www.securityfocus.com/bid/66130
www.yokogawa.com
http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
Exploit
https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a
Third Party Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01
Exploit
http://www.securityfocus.com/bid/66114
More from Centum CS 3000
8.5
CVE-2024-5650
DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation
7.8
CVE-2023-26593
CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information
6.5
CVE-2018-8838
A weakness in access controls in CENTUM CS 1000 all versions, CENTUM CS 3000 versions R3.09.50 and earlier, CENTUM CS 3000 Small versions R3.09.50 and earlier, CENTUM VP versions…
–
CVE-2014-5208
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10,…
–
CVE-2014-3888
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier,…