{"schemaVersion":3,"id":"CVE-2015-5627","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquantum R2.85.00 and earlier, Exaquantum/Batch R2.50.30 and earlier, Exapilot R3.96.10 and earlier, Exaplog R3.40.00 and earlier, Exasmoc R4.03.20 and earlier, Exarqe R4.03.20 and earlier, Field Wireless Device OPC Server R2.01.02 and earlier, PRM R3.12.00 and earlier, STARDOM VDS R7.30.01 and earlier, STARDOM OPC Server for Windows R3.40 and earlier, FAST/TOOLS R10.01 and earlier, B/M9000CS R5.05.01 and earlier, B/M9000 VP R7.03.04 and earlier, and FieldMate R1.01 or R1.02 allows remote attackers to cause a denial of service (process outage) via a crafted packet.","dates":{"published":"2020-02-05T18:45:58.000Z","modified":"2024-08-06T06:59:02.714Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04173,"percentile":0.9085,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.04173},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04173,"percentile":0.9085}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04173,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04173,"percentile":0.9085}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"yokogawa","product":"b\\/m9000_vp_firmware","name":"b\\/m9000 vp firmware","label":"b\\/m9000_vp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R7.03.04 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r7.03.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"R7.03.04 and earlier | ≤ r7.03.04","eol":null,"hubHref":"/vendor/yokogawa/bm9000_vp"},{"vendor":"yokogawa","product":"b\\/m9000cs_firmware","name":"b\\/m9000cs firmware","label":"b\\/m9000cs_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R5.05.01 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r5.05.01","noFixRecorded":false,"fixedIn":null}],"versionsText":"R5.05.01 and earlier | ≤ r5.05.01","eol":null,"hubHref":"/vendor/yokogawa/bm9000cs"},{"vendor":"yokogawa","product":"centum_cs_1000_firmware","name":"centum cs 1000 firmware","label":"centum_cs_1000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R3.08.70 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.08.70","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.08.70 and earlier | ≤ r3.08.70","eol":null,"hubHref":"/vendor/yokogawa/centum_cs_1000"},{"vendor":"yokogawa","product":"centum_cs_3000_firmware","name":"centum cs 3000 firmware","label":"centum_cs_3000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R3.09.50 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.09.50","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.09.50 and earlier | ≤ r3.09.50","eol":null,"hubHref":"/vendor/yokogawa/centum_cs_3000"},{"vendor":"yokogawa","product":"centum_cs_3000_entry_firmware","name":"centum cs 3000 entry firmware","label":"centum_cs_3000_entry_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R3.09.50 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.09.50","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.09.50 and earlier | ≤ r3.09.50","eol":null,"hubHref":"/vendor/yokogawa/centum_cs_3000_entry"},{"vendor":"yokogawa","product":"centum_vp_firmware","name":"centum vp firmware","label":"centum_vp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R5.04.20 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r5.04.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"R5.04.20 and earlier | ≤ r5.04.20","eol":null,"hubHref":"/vendor/yokogawa/centum_vp"},{"vendor":"yokogawa","product":"centum_vp_entry_firmware","name":"centum vp entry firmware","label":"centum_vp_entry_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R5.04.20 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r5.04.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"R5.04.20 and earlier | ≤ r5.04.20","eol":null,"hubHref":"/vendor/yokogawa/centum_vp_entry"},{"vendor":"yokogawa","product":"exaopc","name":"exaopc","label":"exaopc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R3.72.00 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.72.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.72.00 and earlier | ≤ r3.72.00","eol":null,"hubHref":"/vendor/yokogawa/exaopc"},{"vendor":"yokogawa","product":"exapilot","name":"exapilot","label":"exapilot","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R3.96.10 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.96.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.96.10 and earlier | ≤ r3.96.10","eol":null,"hubHref":"/vendor/yokogawa/exapilot"},{"vendor":"yokogawa","product":"exaplog","name":"exaplog","label":"exaplog","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R3.40.00 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.40.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.40.00 and earlier | ≤ r3.40.00","eol":null,"hubHref":"/vendor/yokogawa/exaplog"},{"vendor":"yokogawa","product":"exaquantum","name":"exaquantum","label":"exaquantum","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R2.85.00 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r2.85.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"R2.85.00 and earlier | ≤ r2.85.00","eol":null,"hubHref":"/vendor/yokogawa/exaquantum"},{"vendor":"yokogawa","product":"exaquantum\\/batch","name":"exaquantum\\/batch","label":"exaquantum\\/batch","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R2.50.30 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r2.50.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"R2.50.30 and earlier | ≤ r2.50.30","eol":null,"hubHref":"/vendor/yokogawa/exaquantumbatch"},{"vendor":"yokogawa","product":"exarqe","name":"exarqe","label":"exarqe","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R4.03.20 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r4.03.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"R4.03.20 and earlier | ≤ r4.03.20","eol":null,"hubHref":"/vendor/yokogawa/exarqe"},{"vendor":"yokogawa","product":"exasmoc","name":"exasmoc","label":"exasmoc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R4.03.20 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r4.03.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"R4.03.20 and earlier | ≤ r4.03.20","eol":null,"hubHref":"/vendor/yokogawa/exasmoc"},{"vendor":"yokogawa","product":"fast\\/tools","name":"fast\\/tools","label":"fast\\/tools","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R10.01 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"R10.01 and earlier","eol":null,"hubHref":"/vendor/yokogawa/fasttools"},{"vendor":"yokogawa","product":"field_wireless_device_opc_server","name":"field wireless device opc server","label":"field_wireless_device_opc_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R2.01.02 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r2.01.02","noFixRecorded":false,"fixedIn":null}],"versionsText":"R2.01.02 and earlier | ≤ r2.01.02","eol":null,"hubHref":"/vendor/yokogawa/field_wireless_device_opc_server"},{"vendor":"yokogawa","product":"fieldmate","name":"fieldmate","label":"fieldmate","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R1.01","noFixRecorded":false,"fixedIn":null},{"text":"R1.02","noFixRecorded":false,"fixedIn":null},{"text":"r1.01","noFixRecorded":false,"fixedIn":null},{"text":"r1.02","noFixRecorded":false,"fixedIn":null}],"versionsText":"R1.01 | R1.02 | r1.01 | r1.02","eol":null,"hubHref":"/vendor/yokogawa/fieldmate"},{"vendor":"yokogawa","product":"plant_resource_manager","name":"plant resource manager","label":"plant_resource_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ r3.12.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ r3.12.00","eol":null,"hubHref":"/vendor/yokogawa/plant_resource_manager"},{"vendor":"yokogawa","product":"prm","name":"prm","label":"prm","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R3.12.00 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.12.00 and earlier","eol":null,"hubHref":"/vendor/yokogawa/prm"},{"vendor":"yokogawa","product":"prosafe-rs_firmware","name":"prosafe-rs firmware","label":"prosafe-rs_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"R3.02.10 and earlier","noFixRecorded":false,"fixedIn":null},{"text":"≤ r3.02.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.02.10 and earlier | ≤ r3.02.10","eol":null,"hubHref":"/vendor/yokogawa/prosafe-rs"},{"vendor":"yokogawa","product":"scada_software_\\(fast\\/tools\\)","name":"scada software \\(fast\\/tools\\)","label":"scada_software_\\(fast\\/tools\\)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ r10.01","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ r10.01","eol":null,"hubHref":"/vendor/yokogawa/scada_software_fasttools"},{"vendor":"yokogawa","product":"stardom_opc_server","name":"stardom opc server","label":"stardom_opc_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ r3.40","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ r3.40","eol":null,"hubHref":"/vendor/yokogawa/stardom_opc_server"},{"vendor":"yokogawa","product":"stardom opc server for windows","name":"STARDOM OPC Server for Windows","label":"stardom opc server for windows","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R3.40 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"R3.40 and earlier","eol":null,"hubHref":"/vendor/yokogawa/stardom_opc_server_for_windows"},{"vendor":"yokogawa","product":"stardom vds","name":"STARDOM VDS","label":"stardom vds","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"R7.30.01 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"R7.30.01 and earlier","eol":null,"hubHref":"/vendor/yokogawa/stardom_vds"},{"vendor":"yokogawa","product":"versatile_data_server_software","name":"versatile data server software","label":"versatile_data_server_software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ r7.30.01","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ r7.30.01","eol":null,"hubHref":"/vendor/yokogawa/versatile_data_server_software"}],"affectedCount":25,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-253-01","label":"ics-cert.us-cert.gov/advisories/ICSA-15-253-01","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"http://www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf","label":"www.yokogawa.com/dcs/security/ysar/YSAR-15-0003E.pdf","hostname":"www.yokogawa.com","tags":["X Refsource CONFIRM","Not Applicable"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-02-05T18:45:58.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T06:59:02.714Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T04:44:25.490Z","stale":false,"partial":false}}