CVE-2015-5627

🗓️ 05 Feb 2020 18:45:58Reported by jpcertType

CVE-2015-5627 Yokogawa CENTUM CS stack-based buffer overflo

Reporter	Title	Published	Views	Family All 8
CNVD	Yokogawa Multiple Product Stack Buffer Overflow Vulnerability (CNVD-2015-05996)	15 Sep 201500:00	–	cnvd
Cvelist	CVE-2015-5627	5 Feb 202018:45	–	cvelist
EUVD	EUVD-2015-5579	7 Oct 202500:30	–	euvd
ICS	Yokogawa Multiple Products Buffer Overflow Vulnerabilities	13 Jun 201506:00	–	ics
NVD	CVE-2015-5627	5 Feb 202019:15	–	nvd
Tenable Nessus	Yokogawa Centum Out-of-bounds Write	27 May 202000:00	–	nessus
Tenable Nessus	Yokogawa Multiple Products Stack-based Buffer Overflow (CVE-2015-5627)	7 Feb 202200:00	–	nessus
Prion	Stack overflow	5 Feb 202019:15	–	prion

NVD

Vulners

Node

yokogawa centum_cs_1000_firmwareRange≤r3.08.70

AND

yokogawa centum_cs_1000Match-

Node

yokogawa centum_cs_3000_firmwareRange≤r3.09.50

AND

yokogawa centum_cs_3000Match-

Node

yokogawa centum_cs_3000_entry_firmwareRange≤r3.09.50

AND

yokogawa centum_cs_3000_entryMatch-

Node

yokogawa centum_vp_firmwareRange≤r5.04.20

AND

yokogawa centum_vpMatch-

Node

yokogawa centum_vp_entry_firmwareRange≤r5.04.20

AND

yokogawa centum_vp_entryMatch-

Node

yokogawa prosafe-rs_firmwareRange≤r3.02.10

AND

yokogawa prosafe-rsMatch-

Node

yokogawa exaopcRange≤r3.72.00

yokogawa exapilotRange≤r3.96.10

yokogawa exaplogRange≤r3.40.00

yokogawa exaquantumRange≤r2.85.00

yokogawa exaquantum/batchRange≤r2.50.30

yokogawa exarqeRange≤r4.03.20

yokogawa exasmocRange≤r4.03.20

Node

yokogawa field_wireless_device_opc_serverRange≤r2.01.02

AND

yokogawa field_wireless_device_opc_serverMatch-

Node

yokogawa plant_resource_managerRange≤r3.12.00

yokogawa scada_software_(fast/tools)Range≤r10.01

yokogawa versatile_data_server_softwareRange≤r7.30.01

Node

yokogawa b/m9000cs_firmwareRange≤r5.05.01

AND

yokogawa b/m9000csMatch-

Node

yokogawa b/m9000_vp_firmwareRange≤r7.03.04

AND

yokogawa b/m9000_vpMatch-

Node

yokogawa fieldmateMatchr1.01

yokogawa fieldmateMatchr1.02

Node

yokogawa stardom_opc_serverRange≤r3.40windows

AND

yokogawa stardom_opc_serverMatch-

[
  {
    "product": "CENTUM CS 1000",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.08.70 and earlier"
      }
    ]
  },
  {
    "product": "CENTUM CS 3000",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.09.50 and earlier"
      }
    ]
  },
  {
    "product": "CENTUM CS 3000 Entry",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.09.50 and earlier"
      }
    ]
  },
  {
    "product": "CENTUM VP",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R5.04.20 and earlier"
      }
    ]
  },
  {
    "product": "CENTUM VP Entry",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R5.04.20 and earlier"
      }
    ]
  },
  {
    "product": "ProSafe-RS",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.02.10 and earlier"
      }
    ]
  },
  {
    "product": "Exaopc",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.72.00 and earlier"
      }
    ]
  },
  {
    "product": "Exaquantum",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R2.85.00 and earlier"
      }
    ]
  },
  {
    "product": "Exaquantum/Batch",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R2.50.30 and earlier"
      }
    ]
  },
  {
    "product": "Exapilot",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.96.10 and earlier"
      }
    ]
  },
  {
    "product": "Exaplog",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.40.00 and earlier"
      }
    ]
  },
  {
    "product": "Exasmoc",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R4.03.20 and earlier"
      }
    ]
  },
  {
    "product": "Exarqe",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R4.03.20 and earlier"
      }
    ]
  },
  {
    "product": "Field Wireless Device OPC Server",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R2.01.02 and earlier"
      }
    ]
  },
  {
    "product": "PRM",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.12.00 and earlier"
      }
    ]
  },
  {
    "product": "STARDOM VDS",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R7.30.01 and earlier"
      }
    ]
  },
  {
    "product": "STARDOM OPC Server for Windows",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R3.40 and earlier"
      }
    ]
  },
  {
    "product": "FAST/TOOLS",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R10.01 and earlier"
      }
    ]
  },
  {
    "product": "B/M9000CS",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R5.05.01 and earlier"
      }
    ]
  },
  {
    "product": "B/M9000 VP",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R7.03.04 and earlier"
      }
    ]
  },
  {
    "product": "FieldMate",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R1.01"
      },
      {
        "status": "affected",
        "version": "R1.02"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-15-253-01
yokogawa	www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf

21 Nov 2024 02:33Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

CVSS 210

EPSS0.01355

CWE-787

cve-2015-5627 yokogawa centum cs buffer overflow denial of service nvd security vulnerability