Skip to content
Fencer Intel
critical 9.8

CVE-2015-5628 json

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.0…

published 2020-02-05 6 y ago modified 2026-06-17 4 mo ago also EUVD-2015-5580

cvss
9.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
6.7%
EPSS 6.7% chance of exploitation in 30 days, percentile 93%
public exploits
0
none known

Summary

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to execute arbitrary code via a crafted packet.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-15-253-01 updated cvss 10.0

Yokogawa Multiple Products Buffer Overflow Vulnerabilities

  • Yokogawa B/M9000 VP <=R7.03.04 Yokogawa B/M9000CS <=R5.05.01 Yokogawa CENTUM CS 1000 <=R3.08.70 Yokogawa CENTUM CS 3000 <=R3.09.50 Yokogawa CENTUM CS 3000 Entry <=R3.09.50 Yokogawa CENTUM VP <=R5.04.20
    +15 more products
    Yokogawa CENTUM VP Entry <=R5.04.20 Yokogawa Exaopc <=R3.72.00 Yokogawa Exapilot <=R3.96.10 Yokogawa Exaplog <=R3.40.00 Yokogawa Exaquantum <=R2.85.00 Yokogawa Exaquantum/Batch <=R2.50.30 Yokogawa Exarqe <=R4.03.20 Yokogawa Exasmoc <=R4.03.20 Yokogawa FAST/TOOLS <=R10.01 Yokogawa Field Wireless Device OPC Server <=R2.01.02 Yokogawa FieldMate R1.01, R1.02 Yokogawa PRM <=R3.12.00 Yokogawa ProSafe-RS <=R3.02.10 Yokogawa STARDOM OPC Server for Windows <=R3.40 Yokogawa STARDOM VDS <=R7.30.01
    affected: mitigation “For additional information about the vulnerabilities and to obtain Yokogawa’s product revisions, contact Yokogawa via its Security web site at: (https://plus.yokogawa.co.jp/gw/gw.po?c-id=000498)” plus.yokogawa.co.jp

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

6.72% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • Yokogawa CENTUM CS 1000
  • Yokogawa CENTUM CS 3000
  • Yokogawa CENTUM CS 3000 Entry
  • Yokogawa CENTUM VP
  • Yokogawa CENTUM VP Entry
  • Yokogawa ProSafe-RS
  • Yokogawa Exaopc
  • Yokogawa Exaquantum
  • Yokogawa Exaquantum/Batch
  • Yokogawa Exapilot
  • Yokogawa Exaplog
  • Yokogawa Exasmoc
  • Yokogawa Exarqe
  • Yokogawa Field Wireless Device OPC Server
  • Yokogawa PRM
  • Yokogawa STARDOM VDS
  • Yokogawa STARDOM OPC Server for Windows
  • Yokogawa FAST/TOOLS
  • Yokogawa B/M9000CS
  • Yokogawa B/M9000 VP
  • Yokogawa FieldMate

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.