Skip to content
Fencer Intel
high 8.3

CVE-2014-0782 in the critical feed json

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

published 2014-05-16 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-0813

cvss
8.3
version 2.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
56.7%
EPSS 56.7% chance of exploitation in 30 days, percentile 99%
public exploits
2
Metasploit, Exploit-DB

Summary

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.

Patch / fix

  • Yokogawa CENTUM CS 3000 R3.09.50

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-14-133-01 updated cvss 8.3

Yokogawa Multiple Products Vulnerabilities

  • Yokogawa AAASuite <=R1.20.13 Yokogawa B/M9000 VP <=R7.03.01 Yokogawa B/M9000CS <=R5.05.01 Yokogawa CENTUM CS 1000 All_revisions Yokogawa CENTUM CS 3000 Entry Class <=R3.09.50 Yokogawa CENTUM Event Viewer Package
    +17 more products
    Yokogawa CENTUM Long-term Trend Historian Yokogawa CENTUM VP <=R5.03.00 Yokogawa CENTUM VP Entry Class <=R5.03.00 Yokogawa DAQOPC <=R3.01 Yokogawa EJXMVTool >=R1.02.00, <R1.02.02 Yokogawa Exaopc <=R3.71.02 Yokogawa Exapilot <=R3.96.00 Yokogawa Exaplog <=R3.40.00 Yokogawa Exaquantum >=R2.02.50, <R2.80.00 Yokogawa Exarqe <=R4.03.20 Yokogawa Exasmoc <=R4.03.20 Yokogawa Field Wireless Device OPC Server <=R2.01.01 Yokogawa FieldMate <=R1.03 Yokogawa PRM <=R3.11.20 Yokogawa ProSafe-RS <=R1.03.00 Yokogawa RPO Production Supervisor VP <=R1.03.00 Yokogawa STARDOM FCN/FCJ OPC Server for Windows <=R3.40.01
    affected: mitigation

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

cisa ICSA-14-070-01A updated cvss 8.3

Yokogawa CENTUM CS 3000 Vulnerabilities (Update A)

  • Yokogawa CENTUM CS 3000 <=R3.09.50
    affected: mitigation

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. First public exploit (Metasploit exploit/windows/scada/yokogawa_bkesimmgr_bof)
  2. Published

Exploit prediction

56.69% chance of exploitation in the next 30 days, higher than 99% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

CVSS scores

assigned by version score vector
CNA 2.0 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C
NVD 2.0 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C

Affected products

  • Yokogawa CENTUM CS 3000

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.