CVE-2015-5628

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier…

published February 5, 2020

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A single crafted packet is all it takes to trigger a stack-based buffer overflow in multiple Yokogawa systems! This isn't just a technical hiccup; it's a potential door wide open for remote code execution! 🔥 Think of it like a restaurant where the chef unknowingly accepts a fake order slip. If they don't verify its authenticity, they might cook up something wild instead of the intended dish, leading to chaos in the kitchen! With this vulnerability, an attacker could exploit the oversight to run arbitrary code on any affected system, potentially compromising critical processes and systems. This could lead to unauthorized access, data manipulation, or even system shutdowns, making it a serious risk for operation-critical environments.

Put simply

Think of it like a restaurant where the chef unknowingly accepts a fake order slip. If they don't verify its authenticity, they might cook up something wild instead of the intended dish, leading to chaos in the kitchen! This vulnerability arises from a stack-based buffer overflow in several Yokogawa systems, allowing attackers to send specially crafted packets that the software doesn't handle well, leading to arbitrary code execution.

What to do

With this vulnerability, an attacker could exploit the oversight to run arbitrary code on any affected system, potentially compromising critical processes and systems. This could lead to unauthorized access, data manipulation, or even system shutdowns, making it a serious risk for operation-critical environments. To mitigate this risk, immediately upgrade to the patched versions of Yokogawa software where available. Regularly audit systems for any signs of abnormal activity and ensure that all network communications are monitored for unusual packet behavior. You've got this! Stay proactive with your updates, and you'll strengthen your security posture in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06722 · 93.9th percentile
Published
2020-02-05T18:46Z
EPSS history
Timeline
  • 05 FEB 18:46Z
    Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier…
    cvelistv5