Lucene search

K
cve[email protected]CVE-2014-0782
HistoryMay 16, 2014 - 11:12 a.m.

CVE-2014-0782

2014-05-1611:12:00
CWE-119
web.nvd.nist.gov
43
cve-2014-0782
buffer overflow
bkesimmgr.exe
yokogawa centum
security vulnerability

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

8 High

AI Score

Confidence

Low

0.436 Medium

EPSS

Percentile

97.4%

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.

Affected configurations

NVD
Node
yokogawab\/m9000cs_softwareRange5.05.01
AND
yokogawab\/m9000csMatch-
Node
yokogawacentum_cs_1000_softwareMatch-
AND
yokogawacentum_cs_1000Match-
Node
yokogawacentum_cs_3000_softwareRange2.23.00
AND
yokogawacentum_cs_3000Match-
Node
yokogawacentum_cs_3000_entry_class_softwareRange3.09.50
AND
yokogawacentum_cs_3000_entry_classMatch-
Node
yokogawaexaopcRange3.71.02
Node
yokogawab\/m9000_vp_softwareRange7.03.01
AND
yokogawab\/m9000_vpMatch-
Node
yokogawacentum_vp_entry_class_softwareRange5.03.00
AND
yokogawacentum_vp_entry_classMatch-
Node
yokogawacentum_vp_softwareRange4.03.00
AND
yokogawacentum_vpMatch-

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

8 High

AI Score

Confidence

Low

0.436 Medium

EPSS

Percentile

97.4%