CVE-2015-5627

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier…

published February 5, 2020

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack-based buffer overflow is lurking in several versions of Yokogawa's CENTUM systems, waiting to be triggered by a crafty crafted packet! Think of it like a restaurant where the chef’s prep area gets overloaded with orders that can’t be handled — one poorly timed delivery can cause the whole kitchen to shut down. In this case, the improperly managed data overloads the system and leads to a denial of service, halting operations. This vulnerability can lead to a complete process outage — imagine your production line grinding to a halt because the cooking staff can't keep up with the orders. An attacker could cause significant disruption, impacting productivity and potentially leading to costly downtime.

Put simply

Think of it like a restaurant where the chef’s prep area gets overloaded with orders that can’t be handled — one poorly timed delivery can cause the whole kitchen to shut down. In this case, the improperly managed data overloads the system and leads to a denial of service, halting operations. The stack-based buffer overflow in several versions of Yokogawa's CENTUM and associated products allows remote attackers to exploit this flaw by sending a specially crafted packet, leading to a denial of service condition.

What to do

This vulnerability can lead to a complete process outage — imagine your production line grinding to a halt because the cooking staff can't keep up with the orders. An attacker could cause significant disruption, impacting productivity and potentially leading to costly downtime. To mitigate this issue, ensure you upgrade to the latest versions of the affected products. Check Yokogawa’s support or documentation for specific patch instructions and consider implementing network controls to limit exposure to untrusted packets. You've got this! By staying proactive and applying these updates, you'll keep your systems running smoothly and secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04173 · 90.9th percentile
Published
2020-02-05T18:45Z
EPSS history
Timeline
  • 05 FEB 18:45Z
    Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier…
    cvelistv5