CVE-2014-0783
Yokogawa CENTUM CS 3000 < R3.09.50 - Remote Code Execution via Crafted TCP Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-0783.
PoCs published by Metasploit, juan vazquez, including Metasploit module exploits/windows/scada/yokogawa_bkhodeq_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Yokogawa CENTUM CS 3000's BKHOdeq.exe service via a crafted packet, achieving remote code execution. It uses SEH overwrites, ROP chains, and a stack pivot to execute payloads.
Description
Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in Yokogawa CENTUM CS 3000's BKHOdeq.exe service via a crafted packet, achieving remote code execution. It uses SEH overwrites, ROP chains, and a stack pivot to execute payloads.
This Metasploit module exploits a stack-based buffer overflow in Yokogawa CENTUM CS 3000's BKHOdeq.exe service via a crafted packet sent to port 20171. It leverages SEH overwrites and a ROP chain to achieve remote code execution.