CVE-2014-3888

Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

Desbordamiento de buffer basado en pila en BKFSim_vhfd.exe en Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 y anteriores, CENTUM VP R5.03.20 y anteriores, Exaopc R3.72.00 y anteriores, B/M9000CS R5.05.01 y anteriores y B/M9000 VP R7.03.01 y anteriores, cuando FCS/Test Function está habilitada, permite a atacantes remotos ejecutar código arbitrario a través de un paquete manipulado.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-05-27 CVE Reserved
2014-07-07 CVE Published
2014-07-08 First Exploit
2024-08-06 CVE Updated
2024-12-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (8)

URL	Tag	Source
http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01	Third Party Advisory
http://osvdb.org/show/osvdb/108756	Vdb Entry
http://jvn.jp/vu/JVNVU95045914/index.html
https://www.rapid7.com/blog/post/2014/07/07/r7-2014-06-disclosure-yokogawa-centum-cs-3000-bkfsimvhfdexe-buffer-overflow

URL	Date	SRC
https://www.exploit-db.com/exploits/34009	2014-07-08
http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html	2024-08-06
http://www.exploit-db.com/exploits/34009	2024-08-06

URL	Date	SRC

URL	Date	SRC
http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf	2014-05-23

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Yokogawa Search vendor "Yokogawa"	B\/m9000cs Software Search vendor "Yokogawa" for product "B\/m9000cs Software"	<= 5.05.01 Search vendor "Yokogawa" for product "B\/m9000cs Software" and version " <= 5.05.01"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	B\/m9000cs Search vendor "Yokogawa" for product "B\/m9000cs"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Vp Entry Class Software Search vendor "Yokogawa" for product "Centum Vp Entry Class Software"	<= 5.03.00 Search vendor "Yokogawa" for product "Centum Vp Entry Class Software" and version " <= 5.03.00"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	Centum Vp Entry Class Search vendor "Yokogawa" for product "Centum Vp Entry Class"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Vp Software Search vendor "Yokogawa" for product "Centum Vp Software"	<= 5.03.20 Search vendor "Yokogawa" for product "Centum Vp Software" and version " <= 5.03.20"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	Centum Vp Search vendor "Yokogawa" for product "Centum Vp"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Vp Software Search vendor "Yokogawa" for product "Centum Vp Software"	4.03.00 Search vendor "Yokogawa" for product "Centum Vp Software" and version "4.03.00"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	Centum Vp Search vendor "Yokogawa" for product "Centum Vp"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	B\/m9000 Vp Software Search vendor "Yokogawa" for product "B\/m9000 Vp Software"	<= 7.03.01 Search vendor "Yokogawa" for product "B\/m9000 Vp Software" and version " <= 7.03.01"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	B\/m9000 Vp Search vendor "Yokogawa" for product "B\/m9000 Vp"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.01 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.01"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.02 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.02"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.03 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.03"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.04 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.04"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.05 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.05"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.06 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.06"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.07 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.07"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.08 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.08"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.08.50 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.08.50"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.08.70 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.08.70"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.09 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.09"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	r3.09.50 Search vendor "Yokogawa" for product "Centum Cs 3000" and version "r3.09.50"	-	Safe	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Software Search vendor "Yokogawa" for product "Centum Cs 3000 Software"	<= 2.23.00 Search vendor "Yokogawa" for product "Centum Cs 3000 Software" and version " <= 2.23.00"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Search vendor "Yokogawa" for product "Centum Cs 3000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 1000 Software Search vendor "Yokogawa" for product "Centum Cs 1000 Software"	-	-	Affected	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 1000 Search vendor "Yokogawa" for product "Centum Cs 1000"	-	-	Affected
Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Entry Class Software Search vendor "Yokogawa" for product "Centum Cs 3000 Entry Class Software"	<= 3.09.50 Search vendor "Yokogawa" for product "Centum Cs 3000 Entry Class Software" and version " <= 3.09.50"	-	Affected	in	Yokogawa Search vendor "Yokogawa"	Centum Cs 3000 Entry Class Search vendor "Yokogawa" for product "Centum Cs 3000 Entry Class"	-	-	Affected
Yokogawa Search vendor "Yokogawa"		Exaopc Search vendor "Yokogawa" for product "Exaopc"				<= 3.72.00 Search vendor "Yokogawa" for product "Exaopc" and version " <= 3.72.00"		-		Affected
Yokogawa Search vendor "Yokogawa"		Exaopc Search vendor "Yokogawa" for product "Exaopc"				3.71.02 Search vendor "Yokogawa" for product "Exaopc" and version "3.71.02"		-		Affected