Out-of-bounds write in Yokogawa Electric Corporation CENTUM CS 1000
Priority MEDIUM 49CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (process outage) via a crafted packet.
Why it matters now
EPSS 0.04173 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Yokogawa Electric Corporation | CENTUM CS 1000 | R3.08.70 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | CENTUM CS 3000 | R3.09.50 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | CENTUM CS 3000 Entry | R3.09.50 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | CENTUM VP | R5.04.20 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | CENTUM VP Entry | R5.04.20 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | ProSafe-RS | R3.02.10 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exaopc | R3.72.00 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exaquantum | R2.85.00 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exaquantum/Batch | R2.50.30 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exapilot | R3.96.10 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exaplog | R3.40.00 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exasmoc | R4.03.20 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Exarqe | R4.03.20 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | Field Wireless Device OPC Server | R2.01.02 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | PRM | R3.12.00 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | STARDOM VDS | R7.30.01 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | STARDOM OPC Server for Windows | R3.40 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | FAST/TOOLS | R10.01 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | B/M9000CS | R5.05.01 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | B/M9000 VP | R7.03.04 and earlier | — | No fix listed | CNA |
| Yokogawa Electric Corporation | FieldMate | R1.01; R1.02 | — | No fix listed | CNA |
- CENTUM CS 1000 VendorYokogawa Electric Corporation Affected R3.08.70 and earlier Fixed in — No fix listed CNA
- CENTUM CS 3000 VendorYokogawa Electric Corporation Affected R3.09.50 and earlier Fixed in — No fix listed CNA
- CENTUM CS 3000 Entry VendorYokogawa Electric Corporation Affected R3.09.50 and earlier Fixed in — No fix listed CNA
- CENTUM VP VendorYokogawa Electric Corporation Affected R5.04.20 and earlier Fixed in — No fix listed CNA
- CENTUM VP Entry VendorYokogawa Electric Corporation Affected R5.04.20 and earlier Fixed in — No fix listed CNA
- ProSafe-RS VendorYokogawa Electric Corporation Affected R3.02.10 and earlier Fixed in — No fix listed CNA
- Exaopc VendorYokogawa Electric Corporation Affected R3.72.00 and earlier Fixed in — No fix listed CNA
- Exaquantum VendorYokogawa Electric Corporation Affected R2.85.00 and earlier Fixed in — No fix listed CNA
- Exaquantum/Batch VendorYokogawa Electric Corporation Affected R2.50.30 and earlier Fixed in — No fix listed CNA
- Exapilot VendorYokogawa Electric Corporation Affected R3.96.10 and earlier Fixed in — No fix listed CNA
- Exaplog VendorYokogawa Electric Corporation Affected R3.40.00 and earlier Fixed in — No fix listed CNA
- Exasmoc VendorYokogawa Electric Corporation Affected R4.03.20 and earlier Fixed in — No fix listed CNA
- Exarqe VendorYokogawa Electric Corporation Affected R4.03.20 and earlier Fixed in — No fix listed CNA
- Field Wireless Device OPC Server VendorYokogawa Electric Corporation Affected R2.01.02 and earlier Fixed in — No fix listed CNA
- PRM VendorYokogawa Electric Corporation Affected R3.12.00 and earlier Fixed in — No fix listed CNA
- STARDOM VDS VendorYokogawa Electric Corporation Affected R7.30.01 and earlier Fixed in — No fix listed CNA
- STARDOM OPC Server for Windows VendorYokogawa Electric Corporation Affected R3.40 and earlier Fixed in — No fix listed CNA
- FAST/TOOLS VendorYokogawa Electric Corporation Affected R10.01 and earlier Fixed in — No fix listed CNA
- B/M9000CS VendorYokogawa Electric Corporation Affected R5.05.01 and earlier Fixed in — No fix listed CNA
- B/M9000 VP VendorYokogawa Electric Corporation Affected R7.03.04 and earlier Fixed in — No fix listed CNA
- FieldMate VendorYokogawa Electric Corporation Affected R1.01; R1.02 Fixed in — No fix listed CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:yokogawa:centum_cs_1000_firmware:*:*:*:*:*:*:*:* | up to r3.08.70 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:* | up to r3.09.50 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_cs_3000_entry_firmware:*:*:*:*:*:*:*:* | up to r3.09.50 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_cs_3000_entry:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:* | up to r5.04.20 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_vp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:centum_vp_entry_firmware:*:*:*:*:*:*:*:* | up to r5.04.20 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:centum_vp_entry:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
- cpe:2.3:o:yokogawa:centum_cs_1000_firmware:*:*:*:*:*:*:*:* Versions up to r3.08.70 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:* Versions up to r3.09.50 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_cs_3000_entry_firmware:*:*:*:*:*:*:*:* Versions up to r3.09.50 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_cs_3000_entry:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:* Versions up to r5.04.20 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_vp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:centum_vp_entry_firmware:*:*:*:*:*:*:*:* Versions up to r5.04.20 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:centum_vp_entry:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:yokogawa:prosafe-rs_firmware:*:*:*:*:*:*:*:* | up to r3.02.10 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:prosafe-rs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:* | up to r3.72.00 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exapilot:*:*:*:*:*:*:*:* | up to r3.96.10 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exaplog:*:*:*:*:*:*:*:* | up to r3.40.00 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exaquantum:*:*:*:*:*:*:*:* | up to r2.85.00 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exaquantum\/batch:*:*:*:*:*:*:*:* | up to r2.50.30 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exarqe:*:*:*:*:*:*:*:* | up to r4.03.20 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:exasmoc:*:*:*:*:*:*:*:* | up to r4.03.20 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:field_wireless_device_opc_server:*:*:*:*:*:*:*:* | up to r2.01.02 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:field_wireless_device_opc_server:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:plant_resource_manager:*:*:*:*:*:*:*:* | up to r3.12.00 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:scada_software_\(fast\/tools\):*:*:*:*:*:*:*:* | up to r10.01 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:versatile_data_server_software:*:*:*:*:*:*:*:* | up to r7.30.01 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:b\/m9000cs_firmware:*:*:*:*:*:*:*:* | up to r5.05.01 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:b\/m9000cs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:b\/m9000_vp_firmware:*:*:*:*:*:*:*:* | up to r7.03.04 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:b\/m9000_vp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:fieldmate:r1.01:*:*:*:*:*:*:* | r1.01 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:a:yokogawa:fieldmate:r1.02:*:*:*:*:*:*:* | r1.02 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:o:yokogawa:stardom_opc_server:*:*:*:*:*:windows:*:* | up to r3.40 | Vulnerable | Yokogawa Electric Corporation |
| cpe:2.3:h:yokogawa:stardom_opc_server:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Yokogawa Electric Corporation |
- cpe:2.3:o:yokogawa:prosafe-rs_firmware:*:*:*:*:*:*:*:* Versions up to r3.02.10 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:prosafe-rs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exaopc:*:*:*:*:*:*:*:* Versions up to r3.72.00 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exapilot:*:*:*:*:*:*:*:* Versions up to r3.96.10 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exaplog:*:*:*:*:*:*:*:* Versions up to r3.40.00 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exaquantum:*:*:*:*:*:*:*:* Versions up to r2.85.00 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exaquantum\/batch:*:*:*:*:*:*:*:* Versions up to r2.50.30 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exarqe:*:*:*:*:*:*:*:* Versions up to r4.03.20 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:exasmoc:*:*:*:*:*:*:*:* Versions up to r4.03.20 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:field_wireless_device_opc_server:*:*:*:*:*:*:*:* Versions up to r2.01.02 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:field_wireless_device_opc_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:plant_resource_manager:*:*:*:*:*:*:*:* Versions up to r3.12.00 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:scada_software_\(fast\/tools\):*:*:*:*:*:*:*:* Versions up to r10.01 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:versatile_data_server_software:*:*:*:*:*:*:*:* Versions up to r7.30.01 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:b\/m9000cs_firmware:*:*:*:*:*:*:*:* Versions up to r5.05.01 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:b\/m9000cs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:b\/m9000_vp_firmware:*:*:*:*:*:*:*:* Versions up to r7.03.04 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:b\/m9000_vp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:fieldmate:r1.01:*:*:*:*:*:*:* Versions r1.01 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:a:yokogawa:fieldmate:r1.02:*:*:*:*:*:*:* Versions r1.02 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:o:yokogawa:stardom_opc_server:*:*:*:*:*:windows:*:* Versions up to r3.40 Vulnerable ·Yokogawa Electric Corporation
- cpe:2.3:h:yokogawa:stardom_opc_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Yokogawa Electric Corporation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-5627
- 2026-10-03 Alias added: GHSA-5qfv-m3qx-54v6
References
More Yokogawa Electric Corporation B/m9000 Vp Firmware vulnerabilities
- TI-2015-04742 Out-of-bounds write in Yokogawa Electric Corporation CENTUM CS 1000 CVSS 3.1CRITICAL 9.8
- TI-2015-04740 Out-of-bounds write in Yokogawa Electric Corporation CENTUM CS 1000 CVSS 3.1CRITICAL 9.8
Sources
- CVE-2015-5627 · CVE Program
- CVE-2015-5627 · NVD
- FIRST EPSS
- GHSA-5qfv-m3qx-54v6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences