Read the docs
TI-2014-00727 Aliases CVE-2014-0781GHSA-m7xh-cr6w-qjx3

Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow

Priority MEDIUM 62CWE-122Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · CNA. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.

Summary

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.

Why it matters now

EPSS 0.26299 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed CENTUM CS 3000 (Yokogawa): R3.09.50

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Yokogawa Electric CorporationCENTUM CS 3000before R3.09.50R3.09.50Patch availableCNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:yokogawa:centum_cs_3000:*:*:*:*:*:*:*:*up to r3.09.50VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.01:*:*:*:*:*:*:*r3.01VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.02:*:*:*:*:*:*:*r3.02VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.03:*:*:*:*:*:*:*r3.03VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.04:*:*:*:*:*:*:*r3.04VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.05:*:*:*:*:*:*:*r3.05VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.06:*:*:*:*:*:*:*r3.06VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.07:*:*:*:*:*:*:*r3.07VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08:*:*:*:*:*:*:*r3.08VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.50:*:*:*:*:*:*:*r3.08.50VulnerableYokogawa Electric Corporation
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.70:*:*:*:*:*:*:*r3.08.70VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.09:*:*:*:*:*:*:*r3.09VulnerableYokogawa Electric Corporation

Remediation

  • Fix · CNA CENTUM CS 3000 (Yokogawa) Fixed in R3.09.50

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Yokogawa CENTUM CS 3000 R3.09.50

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowPriority HIGH 75
    • TI-2014-00730 Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowPriority MEDIUM 62
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0781
  2. 2026-10-03 Alias added: GHSA-m7xh-cr6w-qjx3

References

Exploit 1

Other 2

  • TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0CRITICAL 9.0
  • TI-2014-03162 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000… CVSS 2.0HIGH 8.3
  • TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
  • TI-2014-00730 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
  • TI-2014-04257 BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50… CVSS 2.0HIGH 7.5
  • TI-2023-11727 Cleartext storage of sensitive information in Yokogawa Electric Corporation CENTUM series CVSS 3.1HIGH 7.8
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences