CVE-2015-5626
Quick assessment
Affected
Yokogawa CENTUM CS 1000
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Yokogawa CENTUM CS 3000等都是日本横河电机（Yokogawa）公司的产品。Yokogawa CENTUM CS 3000是一套大型生产控制系统。Exaopc是一款OPC数据访问服务器。Exaquantum是一套用于过程工业的工厂信息管理系统（PIMS）。 多款Yokogawa产品中存在缓冲区错误漏洞。远程攻击者可通过特制的数据包利用该漏洞导致拒绝服务（网络通信中断）。以下产品及版本受到影响：Yokogawa CENTUM CS 1000 R3.08.70及之前版本；CENTUM CS
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2015-5626
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (network-communications outage) via a crafted packet.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款Yokogawa产品缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Yokogawa CENTUM CS 3000等都是日本横河电机（Yokogawa）公司的产品。Yokogawa CENTUM CS 3000是一套大型生产控制系统。Exaopc是一款OPC数据访问服务器。Exaquantum是一套用于过程工业的工厂信息管理系统（PIMS）。 多款Yokogawa产品中存在缓冲区错误漏洞。远程攻击者可通过特制的数据包利用该漏洞导致拒绝服务（网络通信中断）。以下产品及版本受到影响：Yokogawa CENTUM CS 1000 R3.08.70及之前版本；CENTUM CS
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Yokogawa | CENTUM CS 1000 | R3.08.70 and earlier | - |
|
| Yokogawa | CENTUM CS 3000 | R3.09.50 and earlier | - |
|
| Yokogawa | CENTUM CS 3000 Entry | R3.09.50 and earlier | - |
|
| Yokogawa | CENTUM VP | R5.04.20 and earlier | - |
|
| Yokogawa | CENTUM VP Entry | R5.04.20 and earlier | - |
|
| Yokogawa | ProSafe-RS | R3.02.10 and earlier | - |
|
| Yokogawa | Exaopc | R3.72.00 and earlier | - |
|
| Yokogawa | Exaquantum | R2.85.00 and earlier | - |
|
| Yokogawa | Exaquantum/Batch | R2.50.30 and earlier | - |
|
| Yokogawa | Exapilot | R3.96.10 and earlier | - |
|
| Yokogawa | Exaplog | R3.40.00 and earlier | - |
|
| Yokogawa | Exasmoc | R4.03.20 and earlier | - |
|
| Yokogawa | Exarqe | R4.03.20 and earlier | - |
|
| Yokogawa | Field Wireless Device OPC Server | R2.01.02 and earlier | - |
|
| Yokogawa | PRM | R3.12.00 and earlier | - |
|
| Yokogawa | STARDOM VDS | R7.30.01 and earlier | - |
|
| Yokogawa | STARDOM OPC Server for Windows | R3.40 and earlier | - |
|
| Yokogawa | FAST/TOOLS | R10.01 and earlier | - |
|
| Yokogawa | B/M9000CS | R5.05.01 and earlier | - |
|
| Yokogawa | B/M9000 VP | R7.03.04 and earlier | - |
|
| Yokogawa | FieldMate | R1.01 | - |
|
II. Public POCs for CVE-2015-5626
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-5626
请登录查看更多情报信息。
Other References for CVE-2015-5626 (2)
-
http://www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf x_refsource_CONFIRM
-
https://ics-cert.us-cert.gov/advisories/ICSA-15-253-01 x_refsource_MISC
Same Patch Batch · Yokogawa · 2020-02-05 · 3 CVEs total
| CVE-2015-5627 | 多款Yokogawa产品缓冲区错误漏洞 | |
| CVE-2015-5628 | 多款Yokogawa产品缓冲区错误漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2015-5626
No comments yet