CVE-2015-5626 describes a stack-based buffer overflow vulnerability affecting numerous Yokogawa industrial control system (ICS) products, including various versions of CENTUM, ProSafe-RS, Exaopc, and others. This critical vulnerability, with a CVSS score of 9.8, allows unauthenticated remote attackers to cause a denial of service by sending a specially crafted network packet. While no public exploit code or active exploitation has been confirmed, the high severity indicates a significant risk of network communication outages. Community discussion and media coverage suggest awareness of this flaw, despite its inactive status on the Hot List and absence from the KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= r3.08.70CPE matchmatch criteria | cpe:2.3:o:yokogawa:centum_cs_1000_firmware:*:*:*:*:*:*:*:* | ||
<= r3.09.50CPE matchmatch criteria | cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:* | ||
<= r3.09.50CPE matchmatch criteria | cpe:2.3:o:yokogawa:centum_cs_3000_entry_firmware:*:*:*:*:*:*:*:* | ||
<= r5.04.20CPE matchmatch criteria | cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:* | ||
<= r5.04.20CPE matchmatch criteria | cpe:2.3:o:yokogawa:centum_vp_entry_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.