NVD

Id
31976  
Name
CVE-2014-3888  
Description
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-19  
Published
2014-07-10  
Modified Date
2015-10-08  
Seq
2014-3888  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168381 31976 CVE-2014-3888 http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01  View
168382 31976 CVE-2014-3888 http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html  View
168383 31976 CVE-2014-3888 34009  View
168384 31976 CVE-2014-3888 http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14289 JVNDB-2014-003164 CENTUM を含む複数の YOKOGAWA 製品にバッファオーバーフローの脆弱性 横河電機株式会社が提供する統合生産制御システムである CENTUM を含む複数の YOKOGAWA 製品には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3888 71176 CVE-2014-3888 31976 8.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003164.html 2014-07-07 2014-07-11 View