Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority MEDIUM 53

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.22543 Published 2014-12-22 No fix listed CWE-284
Priority HIGH 71

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.62312 Published 2014-07-10 No fix listed CWE-119
Priority HIGH 69

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.56688 Published 2014-05-16 Fixed in R3.09.50 CWE-121
Priority MEDIUM 62

Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.359 Published 2014-03-14 Fixed in R3.09.50 CWE-121
Priority HIGH 75

Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.

CVSS 2.0CRITICAL 9.0 Network No auth Interaction — EPSS 0.67618 Published 2014-03-14 Fixed in R3.09.50 CWE-121
Priority MEDIUM 62

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets.

CVSS 2.0CRITICAL 9.3 Network No auth Interaction — EPSS 0.26299 Published 2014-03-14 Fixed in R3.09.50 CWE-122