PT-2014-2031 · Yokogawa · Centum Cs 3000

Publicado 2014-03-14 · Atualizado 2025-09-25 · CVE-2014-0784

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Yokogawa CENTUM CS 3000 versions R3.09.50 and earlier

Description The issue is caused by a stack-based buffer overflow in the BKBCopyD.exe service, which allows remote attackers to execute arbitrary code via a crafted TCP packet sent to port 20111/TCP. This can be exploited by sending a specially crafted packet, potentially allowing an attacker to execute code with the privileges of the CENTUM user.

Recommendations For versions R3.09.50 and earlier, consider restricting access to the BKBCopyD.exe service or disabling it until a patch is available to prevent exploitation. Additionally, restrict access to port 20111/TCP to minimize the risk of remote attackers sending crafted TCP packets.

Exploit

Correção

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-119

CWE-121

Identificadores relacionados

BDU:2021-05457

CVE-2014-0784

Produtos afetados

Centum Cs 3000

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/yokogawa_bkbcopyd_bof.rb · Exploit
• 🔥 http://securityfocus.com/bid/66114 · Exploit
• 🔥 https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/32210 · Exploit
• https://bdu.fstec.ru/vul/2021-05457 · Nota de Segurança
• https://web-material3.yokogawa.com/1/6712/details/YSAR-14-0001-E.pdf · Nota
• https://t.me/cveNotify/136436 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-14-070-01a · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0784 · Nota de Segurança
• http://yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm. · Nota
• http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01 · Nota
• http://securityfocus.com/bid/66130 · Nota