high8.3Public exploit code
CVE-2014-3888
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)2014-07-08 · remote · windows
Impact
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yokogawa | Exaopc | through 3.72.00 Version 3.71.02 |
| Yokogawa | B\/M9000cs Software | through 5.05.01 |
| Yokogawa | B\/M9000cs | All versions |
| Yokogawa | Centum Vp Entry Class Software | through 5.03.00 |
| Yokogawa | Centum Vp Entry Class | All versions |
| Yokogawa | Centum Vp Software | through 5.03.20 Version 4.03.00 |
| Yokogawa | Centum Vp | All versions |
| Yokogawa | B\/M9000 Vp Software | through 7.03.01 |
| Yokogawa | B\/M9000 Vp | All versions |
| Yokogawa | Centum Cs 3000 Software | through 2.23.00 |
| Yokogawa | Centum Cs 3000 | All versions |
| Yokogawa | Centum Cs 1000 Software | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01
- http://osvdb.org/show/osvdb/108756
- http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/34009
- http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01
- http://osvdb.org/show/osvdb/108756
- http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/34009
- http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf