CVE-2014-5208

CVE-2014-5208 describes an authentication bypass vulnerability in the BKBCopyD.exe component of Yokogawa CENTUM CS 3000, CENTUM VP, and Exaopc products. This flaw allows unauthenticated remote attackers to read or write arbitrary files and obtain sensitive database location information. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not currently on the KEV catalog or showing active exploitation, a Metasploit module exists, indicating readily available exploit code, though community discussion and media coverage are minimal.