What’s Vulnerable › Vulnerabilities

CVE-2014-0782: Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

• Severity: high (CVSS 8.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 56.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-05-16 · updated 2026-06-17
• Weakness: CWE-121

Description

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.

Affected products

• Yokogawa B/M9000 Vp: all versions
• Yokogawa B/M9000 Vp Software: through 7.03.01
• Yokogawa B/M9000Cs: all versions
• Yokogawa B/M9000Cs Software: through 5.05.01
• Yokogawa CENTUM CS 1000: all versions
• Yokogawa Centum Cs 1000 Software: all versions
• Yokogawa Electric Corporation CENTUM CS 3000: all versions
• Yokogawa Centum Cs 3000 Entry Class: all versions
• Yokogawa Centum Cs 3000 Entry Class Software: through 3.09.50
• Yokogawa Centum Cs 3000 Software: through 2.23.00
• Yokogawa Electric Corporation CENTUM VP: all versions
• Yokogawa Centum Vp Entry Class: all versions
• Yokogawa Centum Vp Entry Class Software: through 5.03.00
• Yokogawa Centum Vp Software: through 4.03.00
• Yokogawa Electric Corporation Exaopc: through 3.71.02

References

• http://www.securityfocus.com/bid/66130
• http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
• https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a
• http://ics-cert.us-cert.gov/advisories/ICSA-14-133-01
• http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf

Get alerted when CVE-2014-0782 or the next vulnerability affects your stack