peter bassill · operator
$ cve CVE-2014-3888 JSON

CVE-2014-3888 EXPLOIT

8.3
HIGH · CVSS 2.0 · EPSS 62.3% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

Scoring

CVSS8.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:P/I:P/A:C
EPSS62.31% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2014-07-10
Last modified2026-06-17

Affected (15)

VendorProduct
yokogawab\/m9000 vp
yokogawab\/m9000 vp software
yokogawab\/m9000cs
yokogawab\/m9000cs software
yokogawacentum cs 1000
yokogawacentum cs 1000 software
yokogawacentum cs 3000
yokogawacentum cs 3000 entry class
yokogawacentum cs 3000 entry class software
yokogawacentum cs 3000 software
yokogawacentum vp
yokogawacentum vp entry class
yokogawacentum vp entry class software
yokogawacentum vp software
yokogawaexaopc

Public exploits

SourceTitleDate
exploit-dbYokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)2014-07-08

References

→ the Explorer  ·  watch your stack  ·  NVD