CVE-2014-3888

high

Published 2014-07-10 · Modified 2026-05-06

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

9.3

Description

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Exploits

Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.

Exploit-DB

EDB-34009 remote windows

Metasploit · 2014-07-08

Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)

Source code queued for fetch — refresh in a moment.

Metasploit modules

exploit_windows/scada/yokogawa_bkfsim_vhfd rank 300

Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow

Source fetch failed: fetch_error — view the original via the link above.

Application impact

Vendor	Product	Versions
yokogawa	exaopc	`{"endIncluding":"3.72.00"}`
yokogawa	exaopc	`3.71.02`
yokogawa	b\/m9000cs_software	`{"endIncluding":"5.05.01"}`
yokogawa	centum_vp_entry_class_software	`{"endIncluding":"5.03.00"}`
yokogawa	centum_vp_software	`{"endIncluding":"5.03.20"}`
yokogawa	centum_vp_software	`4.03.00`
yokogawa	b\/m9000_vp_software	`{"endIncluding":"7.03.01"}`
yokogawa	centum_cs_3000	`r3.01`
yokogawa	centum_cs_3000	`r3.02`
yokogawa	centum_cs_3000	`r3.03`
yokogawa	centum_cs_3000	`r3.04`
yokogawa	centum_cs_3000	`r3.05`
yokogawa	centum_cs_3000	`r3.06`
yokogawa	centum_cs_3000	`r3.07`
yokogawa	centum_cs_3000	`r3.08`
yokogawa	centum_cs_3000	`r3.08.50`
yokogawa	centum_cs_3000	`r3.08.70`
yokogawa	centum_cs_3000	`r3.09`
yokogawa	centum_cs_3000	`r3.09.50`
yokogawa	centum_cs_3000_software	`{"endIncluding":"2.23.00"}`
yokogawa	centum_cs_1000_software	`-`
yokogawa	centum_cs_3000_entry_class_software	`{"endIncluding":"3.09.50"}`

References

CWEs

CWE-119

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.