CVE-2014-5208: BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP thr...

Security readout for executives and security teams

This issue affects Yokogawa industrial control software components that run BKBCopyD.exe. The service does not require authentication, so a remote attacker could read or write arbitrary files or retrieve sensitive database-location information. In operational technology environments, that creates a serious confidentiality and integrity risk even without confirmed active exploitation. Exposure is most likely in industrial environments using the named Yokogawa CENTUM or Exaopc versions with BKBCopyD.exe reachable over a network. Internet exposure should be treated as especially concerning, but the provided sources do not state how commonly this service is exposed. Prioritize review if these Yokogawa products support production, safety, or regulated operations. The key business risk is unauthenticated remote file manipulation on OT systems, not just data disclosure. Treat remediation as high priority, especially where network segmentation is weak. Mitigation focus: Identify Yokogawa CENTUM and Exaopc systems running affected versions.; Check Yokogawa advisory guidance for vendor-supported patches, upgrades, or compensating controls.; Restrict network access to BKBCopyD.exe and related management interfaces..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.