CVE-2014-0781

Yokogawa Centum CS 3000 < r3.09.50 - Memory Corruption

Title source: rule

Description

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.

Exploits (1)

metasploit WORKING POC

by juan vazquez · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/scada/yokogawa_logsvr.rb

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/66130

[Various Sources] http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.

[Exploit] https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities

[US Government Resource] http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01

[Third Party Advisory, US Government Resource] https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a

Scores

EPSS 0.0796

EPSS Percentile 92.1%

Details

CWE

CWE-119 CWE-122

Status published

Products (13)

Yokogawa/CENTUM CS 3000 < R3.09.50

yokogawa/centum_cs_3000 r3.01

yokogawa/centum_cs_3000 r3.02

yokogawa/centum_cs_3000 r3.03

yokogawa/centum_cs_3000 r3.04

yokogawa/centum_cs_3000 r3.05

yokogawa/centum_cs_3000 r3.06

yokogawa/centum_cs_3000 r3.07

yokogawa/centum_cs_3000 r3.08

yokogawa/centum_cs_3000 r3.08.50

... and 3 more

Published Mar 14, 2014

Tracked Since Feb 18, 2026