PT-2014-2031 · Yokogawa · Centum Cs 3000

Published 2014-03-14 · Updated 2025-09-25 · CVE-2014-0784

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Yokogawa CENTUM CS 3000 versions R3.09.50 and earlier

Description The issue is caused by a stack-based buffer overflow in the BKBCopyD.exe service, which allows remote attackers to execute arbitrary code via a crafted TCP packet sent to port 20111/TCP. This can be exploited by sending a specially crafted packet, potentially allowing an attacker to execute code with the privileges of the CENTUM user.

Recommendations For versions R3.09.50 and earlier, consider restricting access to the BKBCopyD.exe service or disabling it until a patch is available to prevent exploitation. Additionally, restrict access to port 20111/TCP to minimize the risk of remote attackers sending crafted TCP packets.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

BDU:2021-05457

CVE-2014-0784

Affected Products

Centum Cs 3000

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/yokogawa_bkbcopyd_bof.rb · Exploit
• 🔥 http://securityfocus.com/bid/66114 · Exploit
• 🔥 https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/32210 · Exploit
• https://bdu.fstec.ru/vul/2021-05457 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0784 · Security Note
• https://web-material3.yokogawa.com/1/6712/details/YSAR-14-0001-E.pdf · Note
• https://t.me/cveNotify/136436 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-14-070-01a · Note
• http://yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm. · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01 · Note
• http://securityfocus.com/bid/66130 · Note