Unscored severity · published Jul 10, 2014
CVE-2014-3888
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier,…
–
CVSS
62.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)62.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BV
B/m9000 VP · Yokogawa
All versions, or not specified · source: NVD
BV
B/m9000 VP Software · Yokogawa
through 7.03.01 · source: NVD
BM
B/m9000cs · Yokogawa
All versions, or not specified · source: NVD
BS
B/m9000cs Software · Yokogawa
through 5.05.01 · source: NVD
CC
Centum CS 1000 · Yokogawa
All versions, or not specified · source: NVD
CC
Centum CS 1000 Software · Yokogawa
All versions, or not specified · source: NVD
CC
Centum CS 3000 · Yokogawa
All versions, or not specified · source: NVD
CC
Centum CS 3000 Entry Class · Yokogawa
All versions, or not specified · source: NVD
CC
Centum CS 3000 Entry Class Software · Yokogawa
through 3.09.50 · source: NVD
CC
Centum CS 3000 Software · Yokogawa
through 2.23.00 · source: NVD
CV
Centum VP · Yokogawa
All versions, or not specified · source: NVD
CV
Centum VP Entry Class · Yokogawa
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3888
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3888
Third Party Advisory
http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01
osvdb.org
http://osvdb.org/show/osvdb/108756
Exploit
http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html
www.exploit-db.com
http://www.exploit-db.com/exploits/34009
Vendor Advisory
http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf
More from B/m9000 VP
9.1
CVE-2022-26034
Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09.00, CENTUM VP Small R6.01.10 to…
8.8
CVE-2022-30707
Violation of secure design principles exists in the communication of CAMS for HIS
7.8
CVE-2023-26593
CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information
7.8
CVE-2022-27188
OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to…
7.5
CVE-2018-16196
Multiple Yokogawa products that contain Vnet/IP Open Communication Driver (CENTUM CS 3000(R3.05.00 - R3.09.50), CENTUM CS 3000 Entry Class(R3.05.00 - R3.09.50), CENTUM VP(R4.01.00…