CVE-2014-0781

Yokogawa Centum CS 3000 < r3.09.50 - Memory Corruption

Title source: rule

Description

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.

Exploits (1)

metasploit WORKING POC

by juan vazquez · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/scada/yokogawa_logsvr.rb

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/66130

[Various Sources] http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.

[Exploit] https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities

[US Government Resource] http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01

[Third Party Advisory, US Government Resource] https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a

Scores

EPSS 0.0968

EPSS Percentile 92.8%

Classification

CWE

CWE-119 CWE-122

Status draft

Affected Products (12)

yokogawa/centum_cs_3000 < r3.09.50

yokogawa/centum_cs_3000

Timeline

Published Mar 14, 2014

Tracked Since Feb 18, 2026