Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
68Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 8.3epss 57%
de la publicación al arma0 días
Publicada en NVD16 may
1ª PoC12 may
metasploit10 mar
probabilidad de explotación
57%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
AV:N/AC:M/Au:N/C:P/I:P/A:C
Productos afectados
Yokogawa · CENTUM CS 3000PoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33331⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://ics-cert.us-cert.gov/advisories/ICSA-14-133-01https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilitieshttps://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01ahttp://www.securityfocus.com/bid/66130http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf