CVE-2014-0782
Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.
Key facts
- CVSS score
- 8.3 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:M/Au:N/C:P/I:P/A:C- Weakness (CWE)
- CWE-121
- EPSS score
- 56.7% (99th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2014-0813)
- Published
- May 16, 2014
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2014-0813 in the EU Vulnerability Database. Last updated in EUVD on September 25, 2025.
View on the EU Vulnerability DatabaseAffected products
- yokogawa / b/m9000 vp
- yokogawa / b/m9000 vp software
- yokogawa / b/m9000cs
- yokogawa / b/m9000cs software
- yokogawa / centum cs 1000
- yokogawa / centum cs 1000 software
- yokogawa / centum cs 3000
- yokogawa / centum cs 3000 entry class
- yokogawa / centum cs 3000 entry class software
- yokogawa / centum cs 3000 software
- yokogawa / centum vp
- yokogawa / centum vp entry class
- yokogawa / centum vp entry class software
- yokogawa / centum vp software
- yokogawa / exaopc
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-133-01(US Government Resource)
- http://www.securityfocus.com/bid/66130
- http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf(Vendor Advisory)
- http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.
- https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain