Is CVE-2014-3888 being actively exploited?

CVE-2014-3888 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-3888?

CVE-2014-3888 has a CVSS 2.0 base score of 8.3 (HIGH).

CVE-2014-3888

HIGH · CVSS 8.3EPSS 62.3%EU EUVD

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

Key facts

CVSS score: 8.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:C
Weakness (CWE): CWE-119
EPSS score: 62.3% (99th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-3825)
Published: July 10, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-3825 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

yokogawa / b/m9000 vp
yokogawa / b/m9000 vp software
yokogawa / b/m9000cs
yokogawa / b/m9000cs software
yokogawa / centum cs 1000
yokogawa / centum cs 1000 software
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000
yokogawa / centum cs 3000 entry class
yokogawa / centum cs 3000 entry class software
yokogawa / centum cs 3000 software
yokogawa / centum vp
yokogawa / centum vp entry class
yokogawa / centum vp entry class software
yokogawa / centum vp software
yokogawa / centum vp software
yokogawa / exaopc
yokogawa / exaopc

References

http://ics-cert.us-cert.gov/advisories/ICSA-14-189-01(Third Party Advisory, US Government Resource)
http://osvdb.org/show/osvdb/108756
http://packetstormsecurity.com/files/127382/Yokogawa-CS3000-BKFSim_vhfd.exe-Buffer-Overflow.html(Exploit)
http://www.exploit-db.com/exploits/34009
http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0002E.pdf(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain