Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
68Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 8.3epss 36%
from disclosure to weapon0 days
Published on NVDMar 14
1st PoCMar 12
metasploitMar 10
exploitation probability
36%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.
AV:N/AC:M/Au:N/C:P/I:P/A:C
Affected products
Yokogawa · CENTUM CS 3000public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/32210⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilitieshttps://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01ahttp://www.securityfocus.com/bid/66114http://www.securityfocus.com/bid/66130http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.