Critical severity · published Feb 5, 2020
CVE-2015-5626
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
9.8
CVSS
4.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (network-communications outage) via a crafted packet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BV
B/m9000 VP Firmware · Yokogawa
through r7.03.04 · source: NVD
BF
B/m9000cs Firmware · Yokogawa
through r5.05.01 · source: NVD
CC
Centum CS 1000 Firmware · Yokogawa
through r3.08.70 · source: NVD
CC
Centum CS 3000 Entry Firmware · Yokogawa
through r3.09.50 · source: NVD
CC
Centum CS 3000 Firmware · Yokogawa
through r3.09.50 · source: NVD
CV
Centum VP Entry Firmware · Yokogawa
through r5.04.20 · source: NVD
CV
Centum VP Firmware · Yokogawa
through r5.04.20 · source: NVD
EX
Exaopc · Yokogawa
through r3.72.00 · source: NVD
EX
Exapilot · Yokogawa
through r3.96.10 · source: NVD
EX
Exaplog · Yokogawa
through r3.40.00 · source: NVD
EX
Exaquantum · Yokogawa
through r2.85.00 · source: NVD
EX
Exaquantum/batch · Yokogawa
through r2.50.30 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5626
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5626
Not Applicable
http://www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf
Mitigation
https://ics-cert.us-cert.gov/advisories/ICSA-15-253-01
More from B/m9000 VP Firmware
9.8
CVE-2015-5628
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
9.8
CVE-2015-5627
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and…
