GCVE - cpe:2.3:a:yokogawa:centum_cs_3000:r3.04:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:yokogawa:centum_cs_3000:r3.04:*:*:*:*:*:*:*

part: a version: r3.04 update: *

Vendor	Yokogawa (`2f463e4a-4c93-5f61-82ea-07a016e0c34f`)
Product	Centum Cs 3000 (`5031f408-e39f-55e2-a139-c62ebd96f336`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5208`	vulnerable	2026-06-03 14:34:05.653667	Details available BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbitrary files via a STOR operation, or obtain sensitive database-location information via a PMODE operation, a different vulnerability than CVE-2014-0784. Published: 2014-12-22T17:00:00.000Z Updated: 2024-08-06T11:41:47.467Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-14-260-01A http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0003E.pdf https://community.rapid7.com/community/metasploit/blog/2014/08/09/r7-2014-10-disclosure-yokogawa-centum-cs3000-bkbcopydexe-file-system-access	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3888`	not_vulnerable	2026-06-03 14:34:01.749955	Details available Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet. Published: 2014-07-10T10:00:00.000Z Updated: 2024-08-06T10:57:17.922Z Open on db.gcve.eu Reference links http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf http://www.exploit-db.com/exploits/34009 http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01 http://osvdb.org/show/osvdb/108756 http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0784`	vulnerable	2026-06-03 14:33:39.575181	Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Published: 2014-03-14T10:00:00.000Z Updated: 2025-09-25T17:25:47.981Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a http://www.securityfocus.com/bid/66130 https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0783`	vulnerable	2026-06-03 14:33:39.574604	Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet. Published: 2014-03-14T10:00:00.000Z Updated: 2025-09-25T17:24:25.563Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a http://www.securityfocus.com/bid/66130 https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0781`	vulnerable	2026-06-03 14:33:39.558243	Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets. Published: 2014-03-14T10:00:00.000Z Updated: 2025-09-25T17:22:27.951Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a http://www.securityfocus.com/bid/66130 https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.