Yokogawa Software Pre-installed Account Data Access

The vulnerability of Yokogawa software products is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the system...

BKBCopyD.exe RETR STOR PMODE

The vulnerability of the “BKBCopyD.exe” service in Yokogawa’s software products is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to read arbitrary files using the RETR operation, write to arbitrary files using the STOR operation, or obtain...

BKFSim_vhfd.exe Heap Buffer Overflow Code Execution

The vulnerability of the “BKFSimvhfd.exe” service in Yokogawa’s software products is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted package to port...

BKESimmgr.exe RCE

The vulnerability of the “BKESimmgr.exe” service in Yokogawa’s software products is caused by a buffer overflow based on a stack. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code by sending a specially created package to port 34205/TCP...

BKHOdeq.exe Component Code Execution

The vulnerability of the “BKHOdeq.exe” service in Yokogawa’s software products is caused by a buffer overflow based on a stack. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code with user privileges of CENTUM, by sending a specially created package to...

Visual Basic Runtime Privilege Bypass

The vulnerability of the Visual Basic Runtime environment for Yokogawa software products is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Yokogawa Software Heap Buffer Overflow DoS

The vulnerability of Yokogawa software products is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Yokogawa Software Heap Buffer Overflow DoS

The vulnerability of Yokogawa software products is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...