What is the CVSS score of CVE-2014-3888?

CVE-2014-3888 has a CVSS 2.0 base score of 8.3 (High). CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:C. EPSS exploitation probability: 29.0%.

Is there a public PoC exploit available for CVE-2014-3888?

Yes, a public proof-of-concept exploit is available for CVE-2014-3888. Prioritise patching immediately. EPSS: 29.0%.

Exaopc CVE-2014-3888

HIGH

Buffer Overflow (CWE-119)

2014-07-10 vultures@jpcert.or.jp

RCE Buffer Overflow Exaopc B M9000Cs Software B M9000Cs Centum Vp Entry Class Software Centum Vp Entry Class Centum Vp Software Centum Vp B M9000 Vp Software B M9000 Vp Centum Cs 3000 Software Centum Cs 3000 Centum Cs 1000 Software Centum Cs 1000 Centum Cs 3000 Entry Class Software Centum Cs 3000 Entry Class

8.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:M/Au:N/C:P/I:P/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jul 10, 2014 - 11:06 cve.org

HIGH 8.3

DescriptionCVE.org

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet.

AnalysisAI

Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 29.0%.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attackers to execute arbitrary code via a crafted packet. Affected products include: Yokogawa Exaopc, Yokogawa B\/M9000Cs Software, Yokogawa B\/M9000Cs, Yokogawa Centum Vp Entry Class Software, Yokogawa Centum Vp Entry Class.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.