CVE-2014-0783
CVE-2014-0783 is a critical-severity vulnerability in Yokogawa Centum Cs 3000 with a CVSS 2.0 base score of 9.0. Its EPSS exploit-prediction score of 68% places it in the 99th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-121.
Key facts
- Severity: Critical (CVSS 2.0 base score 9.0)
- EPSS exploit prediction: 68% (99th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-121
- Affected product: Yokogawa Centum Cs 3000
- Published:
- Last modified:
Description
Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.
Frequently asked questions
- What is CVE-2014-0783?
- Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via a crafted TCP packet.
- How severe is CVE-2014-0783?
- CVE-2014-0783 has a CVSS 2.0 base score of 9.0, rated critical severity.
- Is CVE-2014-0783 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 68% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2014-0783?
- CVE-2014-0783 primarily affects Yokogawa Centum Cs 3000. In total, 12 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2014-0783?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2014-0783 published?
- CVE-2014-0783 was published on 2014-03-14 and last updated on 2026-06-17.
References
- http://www.securityfocus.com/bid/66130
- http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
- https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a
- http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01
- http://www.securityfocus.com/bid/66111
Affected products (12)
- cpe:2.3:a:yokogawa:centum_cs_3000:*:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.01:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.02:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.03:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.04:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.05:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.06:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.07:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.08:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.50:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.08.70:*:*:*:*:*:*:*
- cpe:2.3:a:yokogawa:centum_cs_3000:r3.09:*:*:*:*:*:*:*
More vulnerabilities in Yokogawa Centum Cs 3000
- CVE-2014-0781 — Critical (CVSS 9.3): Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to…
- CVE-2014-3888 — High (CVSS 8.3): Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM…
- CVE-2014-0782 — High (CVSS 8.3): Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM…
- CVE-2014-0784 — High (CVSS 8.3): Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to…
- CVE-2023-26593 — High (CVSS 7.8): CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information.…
- CVE-2014-5208 — High (CVSS 7.5): BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through…
All CVEs affecting Yokogawa Centum Cs 3000 →
Other CWE-121 (Stack-based Buffer Overflow) vulnerabilities
- CVE-2026-12848 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
- CVE-2026-12847 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
- CVE-2026-12846 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
- CVE-2026-12485 — Critical (CVSS 10.0): GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and…
- CVE-2026-37541 — Critical (CVSS 10.0): Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length…
- CVE-2026-42996 — Critical (CVSS 10.0): JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of…
Browse all CWE-121 (Stack-based Buffer Overflow) vulnerabilities →