CVE-2014-0782
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
Exploit likelihood
What each source reports
CVE List Score used
8.3
Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
- Record
CVE-2014-0782- CVSS 2.0
- 8.3
AV:N/AC:M/Au:N/C:P/I:P/A:C - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2014-0813
8.3
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
- Record
EUVD-2014-0813- CVSS 2.0
- 8.3 High
AV:N/AC:M/Au:N/C:P/I:P/A:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fhrf-qc9p-xhrg No score
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa...
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
- Record
GHSA-fhrf-qc9p-xhrg- Weakness
- CWE-119, CWE-121
- Updated
- 2026-11-02
NVD
8.3
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
- Record
CVE-2014-0782- CVSS 2.0
- 8.3 High
AV:N/AC:M/Au:N/C:P/I:P/A:C - Weakness
- CWE-121, CWE-119
- Updated
- 2026-11-02
Affected products
- yokogawa centum cs 3000
- yokogawa centum cs 1000
- yokogawa centum cs 3000 entry class
- yokogawa centum vp
- yokogawa centum vp entry class
- yokogawa exaopc
- yokogawa b\/m9000 vp
- yokogawa b\/m9000 vp software
- yokogawa b\/m9000cs
- yokogawa b\/m9000cs software
- yokogawa centum cs 1000 software
- yokogawa centum cs 3000 entry class software
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Yokogawa CS3000 - 'BKESimmgr.exe' Remote Buffer Overflow (Metasploit) | 2014-05-12 |
| Metasploit | Yokogawa CS3000 BKESimmgr.exe Buffer Overflow | 2014-03-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0782 is a vulnerability (CVSS 8.3) in Yokogawa Centum Cs 3000, published May 16, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 56.7%, the 99th percentile. No source names a fixed version.
References
cisa.gov/news-events/ics-advisories/icsa-14-070-01a
securityfocus.com/bid/66130
community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf
ics-cert.us-cert.gov/advisories/ICSA-14-133-01
nvd.nist.gov/vuln/detail/CVE-2014-0782
github.com/advisories/GHSA-fhrf-qc9p-xhrg