CVE-2014-0781 Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow
HighCVSS 9.3
EPSS 26.3%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yokogawa centum cs 3000 | <= r3.09.50 | No fix listed |
| yokogawa centum cs 3000 | = r3.01 | No fix listed |
| yokogawa centum cs 3000 | = r3.02 | No fix listed |
| yokogawa centum cs 3000 | = r3.03 | No fix listed |
| yokogawa centum cs 3000 | = r3.04 | No fix listed |
| yokogawa centum cs 3000 | = r3.05 | No fix listed |
| yokogawa centum cs 3000 | = r3.06 | No fix listed |
| yokogawa centum cs 3000 | = r3.07 | No fix listed |
| yokogawa centum cs 3000 | = r3.08 | No fix listed |
| yokogawa centum cs 3000 | = r3.08.50 | No fix listed |
| yokogawa centum cs 3000 | = r3.08.70 | No fix listed |
| yokogawa centum cs 3000 | = r3.09 | No fix listed |
| yokogawa centum cs 3000 | < R3.09.50 | R3.09.50 |
References
- 66130 vdb-entry
- www.yokogawa.com
- community.rapid7.com exploit
- www.cisa.gov
- ics-cert.us-cert.gov us-government-resource