{"id":"CVE-2014-3888","aliases":["EUVD-2014-3825","GHSA-87c7-rqg4-7x74"],"status":"published","title":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09...","description":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.","severity":{"version":"2.0","score":8.3,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.62312,"percentile":0.99189,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2014-07-10T10:00:00Z","modified":"2026-06-17T00:09:05Z","exploits":[{"source":"exploitdb","id":"EDB-34009","title":"Yokogawa CS3000 - 'BKFSim_vhfd.exe' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2014-07-08","url":"https://www.exploit-db.com/exploits/34009"},{"source":"metasploit","id":"exploit/windows/scada/yokogawa_bkfsim_vhfd","title":"Yokogawa CS3000 BKFSim_vhfd.exe Buffer Overflow","type":"exploit","platform":"Windows","date":"2014-05-23","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/scada/yokogawa_bkfsim_vhfd"}],"products":[{"vendor":"yokogawa","product":"b\\/m9000_vp"},{"vendor":"yokogawa","product":"b\\/m9000_vp_software"},{"vendor":"yokogawa","product":"b\\/m9000cs"},{"vendor":"yokogawa","product":"b\\/m9000cs_software"},{"vendor":"yokogawa","product":"centum_cs_1000"},{"vendor":"yokogawa","product":"centum_cs_1000_software"},{"vendor":"yokogawa","product":"centum_cs_3000"},{"vendor":"yokogawa","product":"centum_cs_3000_entry_class"},{"vendor":"yokogawa","product":"centum_cs_3000_entry_class_software"},{"vendor":"yokogawa","product":"centum_cs_3000_software"},{"vendor":"yokogawa","product":"centum_vp"},{"vendor":"yokogawa","product":"centum_vp_entry_class"},{"vendor":"yokogawa","product":"centum_vp_entry_class_software"},{"vendor":"yokogawa","product":"centum_vp_software"},{"vendor":"yokogawa","product":"exaopc"}],"references":[{"url":"http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/34009","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://osvdb.org/show/osvdb/108756","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3888"},{"url":"https://github.com/advisories/GHSA-87c7-rqg4-7x74"}],"sources":{"cve":[{"id":"CVE-2014-3888","description":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.","status":"published","published":"2014-07-10T10:00:00Z","modified":"2024-08-06T10:57:17.922Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3825","description":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.","status":"published","published":"2014-07-10T10:00:00Z","modified":"2024-08-06T10:57:17Z","updated_at":"2026-11-03T01:57:08.947358Z"}],"ghsa":[{"id":"GHSA-87c7-rqg4-7x74","title":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09...","description":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.","status":"published","published":"2022-05-17T04:04:55Z","modified":"2023-01-28T05:01:08Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:29.335465Z"}],"nvd":[{"id":"CVE-2014-3888","description":"Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.","status":"published","published":"2014-07-10T11:06:28.88Z","modified":"2026-06-17T00:09:05.093Z","cvss":[{"version":"2.0","score":8.3,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:54.827864Z"}]}}