Lucene search

[email protected]NVD:CVE-2015-5628

HistoryFeb 05, 2020 - 7:15 p.m.

CVE-2015-5628

2020-02-0519:15:10

CWE-787

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to execute arbitrary code via a crafted packet.

Affected configurations

Nvd

Node

yokogawacentum_cs_1000_firmwareRange≤r3.08.70

AND

yokogawacentum_cs_1000Match-

Node

yokogawacentum_cs_3000_firmwareRange≤r3.09.50

AND

yokogawacentum_cs_3000Match-

Node

yokogawacentum_cs_3000_entry_firmwareRange≤r3.09.50

AND

yokogawacentum_cs_3000_entryMatch-

Node

yokogawacentum_vp_firmwareRange≤r5.04.20

AND

yokogawacentum_vpMatch-

Node

yokogawacentum_vp_entry_firmwareRange≤r5.04.20

AND

yokogawacentum_vp_entryMatch-

Node

yokogawaprosafe-rs_firmwareRange≤r3.02.10

AND

yokogawaprosafe-rsMatch-

Node

yokogawaexaopcRange≤r3.72.00

yokogawaexapilotRange≤r3.96.10

yokogawaexaplogRange≤r3.40.00

yokogawaexaquantumRange≤r2.85.00

yokogawaexaquantum\/batchRange≤r2.50.30

yokogawaexarqeRange≤r4.03.20

yokogawaexasmocRange≤r4.03.20

Node

yokogawafield_wireless_device_opc_serverRange≤r2.01.02

AND

yokogawafield_wireless_device_opc_serverMatch-

Node

yokogawaplant_resource_managerRange≤r3.12.00

yokogawascada_software_\(fast\/tools\)Range≤r10.01

yokogawaversatile_data_server_softwareRange≤r7.30.01

Node

yokogawab\/m9000cs_firmwareRange≤r5.05.01

AND

yokogawab\/m9000csMatch-

Node

yokogawab\/m9000_vp_firmwareRange≤r7.03.04

AND

yokogawab\/m9000_vpMatch-

Node

yokogawafieldmateMatchr1.01

yokogawafieldmateMatchr1.02

Node

yokogawastardom_opc_serverRange≤r3.40windows

AND

yokogawastardom_opc_serverMatch-

VendorProductVersionCPE
yokogawacentum_cs_1000_firmware*cpe:2.3:o:yokogawa:centum_cs_1000_firmware:*:*:*:*:*:*:*:*
yokogawacentum_cs_1000-cpe:2.3:h:yokogawa:centum_cs_1000:-:*:*:*:*:*:*:*
yokogawacentum_cs_3000_firmware*cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:*
yokogawacentum_cs_3000-cpe:2.3:h:yokogawa:centum_cs_3000:-:*:*:*:*:*:*:*
yokogawacentum_cs_3000_entry_firmware*cpe:2.3:o:yokogawa:centum_cs_3000_entry_firmware:*:*:*:*:*:*:*:*
yokogawacentum_cs_3000_entry-cpe:2.3:h:yokogawa:centum_cs_3000_entry:-:*:*:*:*:*:*:*
yokogawacentum_vp_firmware*cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:*
yokogawacentum_vp-cpe:2.3:h:yokogawa:centum_vp:-:*:*:*:*:*:*:*
yokogawacentum_vp_entry_firmware*cpe:2.3:o:yokogawa:centum_vp_entry_firmware:*:*:*:*:*:*:*:*
yokogawacentum_vp_entry-cpe:2.3:h:yokogawa:centum_vp_entry:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yokogawa	centum_cs_1000_firmware	*	cpe:2.3:o:yokogawa:centum_cs_1000_firmware::::::::
yokogawa	centum_cs_1000	-	cpe:2.3:h:yokogawa:centum_cs_1000:-:::::::*
yokogawa	centum_cs_3000_firmware	*	cpe:2.3:o:yokogawa:centum_cs_3000_firmware::::::::
yokogawa	centum_cs_3000	-	cpe:2.3:h:yokogawa:centum_cs_3000:-:::::::*
yokogawa	centum_cs_3000_entry_firmware	*	cpe:2.3:o:yokogawa:centum_cs_3000_entry_firmware::::::::
yokogawa	centum_cs_3000_entry	-	cpe:2.3:h:yokogawa:centum_cs_3000_entry:-:::::::*
yokogawa	centum_vp_firmware	*	cpe:2.3:o:yokogawa:centum_vp_firmware::::::::
yokogawa	centum_vp	-	cpe:2.3:h:yokogawa:centum_vp:-:::::::*
yokogawa	centum_vp_entry_firmware	*	cpe:2.3:o:yokogawa:centum_vp_entry_firmware::::::::
yokogawa	centum_vp_entry	-	cpe:2.3:h:yokogawa:centum_vp_entry:-:::::::*

Rows per page:

1-10 of 321

References

www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf

ics-cert.us-cert.gov/advisories/ICSA-15-253-01

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Related for NVD:CVE-2015-5628

nessus2 cvelist1 prion1 cve1 ics1