CVE-2014-3888

high · 8.3

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

8.3

CVSS

62.3%

EPSS (exploit prob.)

99th

EPSS percentile

2014-07-10

Published

AV:N/AC:M/Au:N/C:P/I:P/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
yokogawa	exaopc	<= 3.72.00
yokogawa	exaopc	3.71.02
yokogawa	b/m9000cs_software	<= 5.05.01
yokogawa	b/m9000cs	all versions
yokogawa	centum_vp_entry_class_software	<= 5.03.00
yokogawa	centum_vp_entry_class	all versions
yokogawa	centum_vp_software	<= 5.03.20
yokogawa	centum_vp_software	4.03.00
yokogawa	centum_vp	all versions
yokogawa	b/m9000_vp_software	<= 7.03.01
yokogawa	b/m9000_vp	all versions
yokogawa	centum_cs_3000	r3.01
yokogawa	centum_cs_3000	r3.02
yokogawa	centum_cs_3000	r3.03
yokogawa	centum_cs_3000	r3.04
yokogawa	centum_cs_3000	r3.05
yokogawa	centum_cs_3000	r3.06
yokogawa	centum_cs_3000	r3.07
yokogawa	centum_cs_3000	r3.08
yokogawa	centum_cs_3000	r3.08.50
yokogawa	centum_cs_3000	r3.08.70
yokogawa	centum_cs_3000	r3.09
yokogawa	centum_cs_3000	r3.09.50
yokogawa	centum_cs_3000_software	<= 2.23.00
yokogawa	centum_cs_3000	all versions
yokogawa	centum_cs_1000_software	all versions
yokogawa	centum_cs_1000	all versions
yokogawa	centum_cs_3000_entry_class_software	<= 3.09.50
yokogawa	centum_cs_3000_entry_class	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-3888