CVE-2014-5208

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc…

published December 22, 2014

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbitrary files via a STOR operation, or obtain sensitive database-location information via a PMODE operation, a different vulnerability than CVE-2014-0784.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22543 · 97.7th percentile
Published
2014-12-22T17:00Z
EPSS history
Timeline
  • 22 DEC 17:00Z
    BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc…
    cvelistv5