Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow
48Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.3epss 25%
from disclosure to weapon0 days
Published on NVDMar 14
metasploitMar 10
exploitation probability
25%top 2% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected products
Yokogawa · CENTUM CS 3000References
http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilitieshttps://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01ahttp://www.securityfocus.com/bid/66130http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.