CVE-2014-0782CWE-121

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

High · published May 16, 2014

Patch now

High probability of exploitation

CVSS calls it high at 8.3. It sits in the 99.1th percentile for exploit probability.

CVSS v2.0

8.3

EPSS

57%

Percentile

99.1

In the wild

Unconfirmed

What it is

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.

The record

Technical detail

CVSS v2.0: 8.3 · HIGH
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
CVSS v4.0: Not supplied
EPSS: 0.56688 · 99.1th percentile
Weakness: CWE-121 · Stack-based Buffer Overflow
Published: 2014-05-16T10:00Z

EPSS history

Timeline

16 MAY 10:00Z
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
cvelistv5