CVE-2014-3888
High
Description
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
SeverityHigh
CVSS8.3
Exploit probability—
ProductYokogawa Exaopc
PublishedJul 10, 2014
First seenJul 10, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yokogawa exaopc | v ≤ 3.72.00, 3.71.02 | — |
| yokogawa b\/m9000cs_software | v ≤ 5.05.01 | — |
| yokogawa b\/m9000cs | No range specified | — |
| yokogawa centum_vp_entry_class_software | v ≤ 5.03.00 | — |
| yokogawa centum_vp_entry_class | No range specified | — |
| yokogawa centum_vp_software | v ≤ 5.03.20, 4.03.00 | — |
| yokogawa centum_vp | No range specified | — |
| yokogawa b\/m9000_vp_software | v ≤ 7.03.01 | — |
| yokogawa b\/m9000_vp | No range specified | — |
| yokogawa centum_cs_3000_software | v ≤ 2.23.00 | — |
| yokogawa centum_cs_3000 | No range specified | — |
| yokogawa centum_cs_1000_software | No range specified | — |
| yokogawa centum_cs_1000 | No range specified | — |
| yokogawa centum_cs_3000_entry_class_software | v ≤ 3.09.50 | — |
| yokogawa centum_cs_3000_entry_class | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.