Buffer overflow in Yokogawa B\/m9000cs
CVE-2014-3888
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlie…
Vulnerability class: Buffer Overflow
EPSS: 0.623 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Yokogawa B\/m9000cs
- Yokogawa B\/m9000cs_software
- Yokogawa B\/m9000_vp
- Yokogawa B\/m9000_vp_software
- Yokogawa Centum_cs_1000
- Yokogawa Centum_cs_1000_software
- Yokogawa Centum_cs_3000 — versions r3.01, r3.02, r3.03
- Yokogawa Centum_cs_3000_entry_class
- Yokogawa Centum_cs_3000_entry_class_software
- Yokogawa Centum_cs_3000_software
Weakness classification (CWE)
Public proof-of-concept exploits
References
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- 34009 (exploit, x_refsource_EXPLOIT-DB)
- vultures@jpcert.or.jp (US Government Resource, Third Party Advisory, x_refsource_MISC)
- 108756 (x_refsource_OSVDB, vdb-entry)
- vultures@jpcert.or.jp (Exploit, x_refsource_MISC)
Frequently asked questions
- What is CVE-2014-3888?
- CVE-2014-3888 is a vulnerability in Yokogawa B\/m9000cs, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-07-10.
- Is CVE-2014-3888 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.