Read the docs
TI-2014-00730 Aliases CVE-2014-0784GHSA-fhmg-5gcw-wqfw

Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow

Priority MEDIUM 62CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

Why it matters now

EPSS 0.359 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed CENTUM CS 3000 (Yokogawa): R3.09.50

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Yokogawa Electric CorporationCENTUM CS 3000before R3.09.50R3.09.50Patch availableCNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:yokogawa:centum_cs_3000:*:*:*:*:*:*:*:*up to r3.09.50VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.01:*:*:*:*:*:*:*r3.01VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.02:*:*:*:*:*:*:*r3.02VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.03:*:*:*:*:*:*:*r3.03VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.04:*:*:*:*:*:*:*r3.04VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.05:*:*:*:*:*:*:*r3.05VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.06:*:*:*:*:*:*:*r3.06VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.07:*:*:*:*:*:*:*r3.07VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08:*:*:*:*:*:*:*r3.08VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.50:*:*:*:*:*:*:*r3.08.50VulnerableYokogawa Electric Corporation
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.70:*:*:*:*:*:*:*r3.08.70VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.09:*:*:*:*:*:*:*r3.09VulnerableYokogawa Electric Corporation

Remediation

  • Fix · CNA CENTUM CS 3000 (Yokogawa) Fixed in R3.09.50

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Yokogawa CENTUM CS 3000 R3.09.50

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowPriority HIGH 75
    • TI-2014-00727 Yokogawa CENTUM CS 3000 Heap-based Buffer OverflowPriority MEDIUM 62
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0784
  2. 2026-10-03 Alias added: GHSA-fhmg-5gcw-wqfw

References

Exploit 1

Advisory 1

Other 2

  • TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0CRITICAL 9.0
  • TI-2014-03162 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000… CVSS 2.0HIGH 8.3
  • TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
  • TI-2014-00727 Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow CVSS 2.0CRITICAL 9.3
  • TI-2014-04257 BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50… CVSS 2.0HIGH 7.5
  • TI-2023-11727 Cleartext storage of sensitive information in Yokogawa Electric Corporation CENTUM series CVSS 3.1HIGH 7.8
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences