What is the CVSS score of CVE-2014-0782?

CVE-2014-0782 has a CVSS 2.0 base score of 8.3 (High). CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:C. EPSS exploitation probability: 39.8%.

Is there a public PoC exploit available for CVE-2014-0782?

Yes, a public proof-of-concept exploit is available for CVE-2014-0782. Prioritise patching immediately. EPSS: 39.8%.

B M9000Cs Software CVE-2014-0782

HIGH

Stack-based Buffer Overflow (CWE-121)

2014-05-16 ics-cert@hq.dhs.gov

RCE Stack Overflow Buffer Overflow B M9000Cs Software B M9000Cs Centum Cs 1000 Software Centum Cs 1000 Centum Cs 3000 Software Centum Cs 3000 Centum Cs 3000 Entry Class Software Centum Cs 3000 Entry Class Exaopc B M9000 Vp Software B M9000 Vp Centum Vp Entry Class Software Centum Vp Entry Class Centum Vp Software Centum Vp

8.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:M/Au:N/C:P/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 16, 2014 - 11:12 cve.org

HIGH 8.3

DescriptionCVE.org

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet.

AnalysisAI

Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 39.8%.

Technical ContextAI

This vulnerability is classified under CWE-121. Stack-based buffer overflow in BKESimmgr.exe in the Expanded Test Functions package in Yokogawa CENTUM CS 1000, CENTUM CS 3000 Entry Class R3.09.50 and earlier, CENTUM VP R5.03.00 and earlier, CENTUM VP Entry Class R5.03.00 and earlier, Exaopc R3.71.02 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier allows remote attackers to execute arbitrary code via a crafted packet. Affected products include: Yokogawa B\/M9000Cs Software, Yokogawa B\/M9000Cs, Yokogawa Centum Cs 1000 Software, Yokogawa Centum Cs 1000, Yokogawa Centum Cs 3000 Software.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.