CVE-2014-3888: Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earl...

Security readout for executives and security teams

CVE-2014-3888 is a remote code execution flaw in Yokogawa industrial control software. If the FCS/Test Function is enabled, a crafted network packet can trigger a stack buffer overflow and potentially let an attacker run code on affected systems. Exposure is most likely in older Yokogawa DCS/OPC or B/M9000 environments where affected versions remain deployed and FCS/Test Function is enabled or reachable over a network. Treat this as high priority where affected Yokogawa systems are reachable. The issue targets industrial control environments and can allow code execution, but exposure depends on product version and FCS/Test Function configuration. Mitigation focus: Confirm affected Yokogawa product versions and FCS/Test Function status.; Review Yokogawa advisory YSAR-14-0002E and ICS-CERT guidance for supported fixes.; Restrict network access to affected systems to trusted engineering hosts only..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.