Read the docs
TI-2014-03162 Aliases CVE-2014-3888GHSA-87c7-rqg4-7x74

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000…

Priority HIGH 71CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

Why it matters now

EPSS 0.62312 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 29

CPEVersionsRoleVendor
cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:*up to 3.72.00VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:exaopc:3.71.02:*:*:*:*:*:*:*3.71.02VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:b\/m9000cs_software:*:*:*:*:*:*:*:*up to 5.05.01VulnerableYokogawa Electric Corporation
cpe:2.3:h:yokogawa:b\/m9000cs:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp_entry_class_software:*:*:*:*:*:*:*:*up to 5.03.00VulnerableYokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_vp_entry_class:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp_software:*:*:*:*:*:*:*:*up to 5.03.20VulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_vp_software:4.03.00:*:*:*:*:*:*:*4.03.00VulnerableYokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_vp:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:b\/m9000_vp_software:*:*:*:*:*:*:*:*up to 7.03.01VulnerableYokogawa Electric Corporation
Show 19 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:yokogawa:b\/m9000_vp:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.01:*:*:*:*:*:*:*r3.01Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.02:*:*:*:*:*:*:*r3.02Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.03:*:*:*:*:*:*:*r3.03Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.04:*:*:*:*:*:*:*r3.04Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.05:*:*:*:*:*:*:*r3.05Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.06:*:*:*:*:*:*:*r3.06Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.07:*:*:*:*:*:*:*r3.07Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08:*:*:*:*:*:*:*r3.08Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.50:*:*:*:*:*:*:*r3.08.50Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.70:*:*:*:*:*:*:*r3.08.70Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.09:*:*:*:*:*:*:*r3.09Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000:r3.09.50:*:*:*:*:*:*:*r3.09.50Running onYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000_software:*:*:*:*:*:*:*:*up to 2.23.00VulnerableYokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_cs_3000:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_1000_software:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_cs_1000:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation
cpe:2.3:a:yokogawa:centum_cs_3000_entry_class_software:*:*:*:*:*:*:*:*up to 3.09.50VulnerableYokogawa Electric Corporation
cpe:2.3:h:yokogawa:centum_cs_3000_entry_class:-:*:*:*:*:*:*:*not specified by NVDVulnerableYokogawa Electric Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3888
  2. 2026-10-03 Alias added: GHSA-87c7-rqg4-7x74

References

Exploit 2

Advisory 2

Other 1

  • TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
  • TI-2022-09520 Improper authentication in Yokogawa Electric Corporation CENTUM VP series with VP6E5000… CVSS 3.1CRITICAL 9.1
  • TI-2022-12843 Violation of secure design principles exists in the communication of CAMS for HIS. CVSS 3.1HIGH 8.8
  • TI-2018-11593 Improper input validation in Yokogawa Electric Corporation Multiple Yokogawa products… CVSS 3.0HIGH 7.5
  • TI-2023-11727 Cleartext storage of sensitive information in Yokogawa Electric Corporation CENTUM series CVSS 3.1HIGH 7.8
  • TI-2022-10311 OS command injection in Yokogawa Electric Corporation CENTUM VP series with VP6E5150… CVSS 3.1HIGH 7.8
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences