CVE-2014-0784 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
HighCVSS 8.3
EPSS 35.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yokogawa centum cs 3000 | <= r3.09.50 | No fix listed |
| yokogawa centum cs 3000 | = r3.01 | No fix listed |
| yokogawa centum cs 3000 | = r3.02 | No fix listed |
| yokogawa centum cs 3000 | = r3.03 | No fix listed |
| yokogawa centum cs 3000 | = r3.04 | No fix listed |
| yokogawa centum cs 3000 | = r3.05 | No fix listed |
| yokogawa centum cs 3000 | = r3.06 | No fix listed |
| yokogawa centum cs 3000 | = r3.07 | No fix listed |
| yokogawa centum cs 3000 | = r3.08 | No fix listed |
| yokogawa centum cs 3000 | = r3.08.50 | No fix listed |
| yokogawa centum cs 3000 | = r3.08.70 | No fix listed |
| yokogawa centum cs 3000 | = r3.09 | No fix listed |
| yokogawa centum cs 3000 | < R3.09.50 | R3.09.50 |
References
- 66130 vdb-entry
- www.yokogawa.com
- community.rapid7.com exploit
- www.cisa.gov
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 66114 exploit vdb-entry