CVE-2014-3888
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09...
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
- Record
CVE-2014-3888- CVSS 2.0
- 8.3 High
AV:N/AC:M/Au:N/C:P/I:P/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
- Record
CVE-2014-3888- Updated
- 2026-11-02
EUVDEUVD-2014-3825 No score
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
- Record
EUVD-2014-3825- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87c7-rqg4-7x74 No score
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09...
Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.
- Record
GHSA-87c7-rqg4-7x74- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
- yokogawa centum cs 1000
- yokogawa centum cs 3000
- yokogawa centum vp
- yokogawa exaopc
- yokogawa b\/m9000 vp
- yokogawa b\/m9000 vp software
- yokogawa b\/m9000cs
- yokogawa b\/m9000cs software
- yokogawa centum cs 1000 software
- yokogawa centum cs 3000 entry class
- yokogawa centum cs 3000 entry class software
- yokogawa centum cs 3000 software
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit) | 2014-07-08 |
| Metasploit | Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow | 2014-05-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3888 is a high vulnerability (CVSS 8.3) in Yokogawa Centum Cs 1000, published July 10, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 62.3%, the 99th percentile. No source names a fixed version.
References
yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf
exploit-db.com/exploits/34009
ics-cert.us-cert.gov/advisories/ICSA-14-189-01
osvdb.org/show/osvdb/108756
packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html
nvd.nist.gov/vuln/detail/CVE-2014-3888
github.com/advisories/GHSA-87c7-rqg4-7x74