NVD

Id
32957  
Name
CVE-2014-5208  
Description
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbitrary files via a STOR operation, or obtain sensitive database-location information via a PMODE operation, a different vulnerability than CVE-2014-0784.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-22  
Modified Date
2014-12-22  
Seq
2014-5208  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173017 32957 CVE-2014-5208 http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0003E.pdf  View
173018 32957 CVE-2014-5208 https://community.rapid7.com/community/metasploit/blog/2014/08/09/r7-2014-10-disclosure-yokogawa-centum-cs3000-bkbcopydexe-file-system-access  View
173019 32957 CVE-2014-5208 https://ics-cert.us-cert.gov/advisories/ICSA-14-260-01A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15374 JVNDB-2014-004249 CENTUM および Exaopc において任意のファイルにアクセス可能な脆弱性 横河電機株式会社が提供する CENTUM および Exaopc には、BKBCopyD.exe の処理に問題があり、任意のファイルにアクセス可能な脆弱性が存在します。 CVE-2014-5208 72497 CVE-2014-5208 32957 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004249.html 2014-09-17 2014-12-24 View