CVE-2014-3888
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 62%
from disclosure to weapon0 days
Published on NVDJul 10
1st PoCJul 8
metasploitMay 23
exploitation probability
62%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencepacketstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.htmlunverifiedcve_referencewww.exploit-db.com/exploits/34009unverifiedexploitdbwww.exploit-db.com/exploits/34009unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.