CVE-2014-0782

🗓️ 16 May 2014 10:00:00Reported by icscertType

cve🔗 web.nvd.nist.gov👁 78 Views🌐 WEB

CVE-2014-0782: Stack-based buffer overflow in BKESimmgr.exe in Yokogawa CENTU

Reporter	Title	Published	Views	Family All 12
0day.today	Yokogawa CS3000 BKESimmgr.exe Buffer Overflow Exploit	10 May 201400:00	–	zdt
BDU FSTEC	The vulnerability of the BKESimmgr.exe component in Yokogawa’s software products allows a hacker to elevate their privileges and execute arbitrary code.	16 Nov 202100:00	–	bdu_fstec
Circl	CVE-2014-0782	12 May 201400:00	–	circl
Check Point Advisories	Yokogawa CENTUM CS 3000 SCADA Remote Code Execution (CVE-2014-0782)	15 May 201400:00	–	checkpoint_advisories
Cvelist	CVE-2014-0782 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow	16 May 201410:00	–	cvelist
Exploit DB	Yokogawa CS3000 - 'BKESimmgr.exe' Remote Buffer Overflow (Metasploit)	12 May 201400:00	–	exploitdb
Metasploit	Yokogawa CS3000 BKESimmgr.exe Buffer Overflow	9 May 201415:27	–	metasploit
NVD	CVE-2014-0782	16 May 201411:12	–	nvd
Tenable Nessus	Yokogawa B\/m9000cs Improper Restriction of Operations within the Bounds of a Memory Buffer	8 Nov 201900:00	–	nessus
Tenable Nessus	Yokogawa CENTUM, Exaopc and B/M9000 Stack-based Buffer Overflow (CVE-2014-0782)	7 Feb 202200:00	–	nessus

NVD

Vulners

Node

AND

yokogawa b/m9000cs_softwareRange≤5.05.01

yokogawa b/m9000csMatch-

Node

AND

yokogawa centum_cs_1000_softwareMatch-

yokogawa centum_cs_1000Match-

Node

AND

yokogawa centum_cs_3000_softwareRange≤2.23.00

yokogawa centum_cs_3000Match-

Node

AND

yokogawa centum_cs_3000_entry_class_softwareRange≤3.09.50

yokogawa centum_cs_3000_entry_classMatch-

Node

yokogawa exaopcRange≤3.71.02

Node

AND

yokogawa b/m9000_vp_softwareRange≤7.03.01

yokogawa b/m9000_vpMatch-

Node

AND

yokogawa centum_vp_entry_class_softwareRange≤5.03.00

yokogawa centum_vp_entry_classMatch-

Node

AND

yokogawa centum_vp_softwareRange≤4.03.00

yokogawa centum_vpMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "CENTUM CS 3000",
    "vendor": "Yokogawa",
    "versions": [
      {
        "lessThan": "R3.09.50",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
community	www.community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
securityfocus	www.securityfocus.com/bid/66130
cisa	www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a
yokogawa	www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-14-133-01
yokogawa	www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf

Parameter	Position	Path	Description	CWE
Operation Identifier	path	BKESimmgr.exe	Stack-based buffer overflow in BKESimmgr.exe triggered by crafted TCP packets to the service (port 34205) as part of Yokogawa CENTUM CS 3000/VP/Exaopc/B/M9000 products.	CWE-119, CWE-121
length	path	BKESimmgr.exe	Stack-based buffer overflow in BKESimmgr.exe triggered by crafted TCP packets to the service (port 34205) as part of Yokogawa CENTUM CS 3000/VP/Exaopc/B/M9000 products.	CWE-119, CWE-121
payload structure (bof data)	path	BKESimmgr.exe	Stack-based buffer overflow in BKESimmgr.exe triggered by crafted TCP packets to the service (port 34205) as part of Yokogawa CENTUM CS 3000/VP/Exaopc/B/M9000 products.	CWE-119, CWE-121

17 Jun 2026 00:03Current

8High risk

Vulners AI Score8

CVSS 28.3

EPSS0.56839