CVE:CVE-2014-0782
CNNVD:CNNVD-201405-286
Yokogawa CENTUM CS等都是日本横河电机（Yokogawa）公司的产品。Yokogawa CENTUM CS和CENTUM VP都是大型生产控制系统。Exaopc是一款OPC数据访问服务器。
多款Yokogawa产品的Expanded Test Functions程序包中的BKESimmgr.exe文件存在基于栈的缓冲区溢出漏洞。远程攻击者可借助特制的数据包利用该漏洞执行任意代码。以下产品及版本受到影响：Yokogawa CENTUM CS 1000，CENTUM CS 3000 Entry Class R3.09.50及之前的版本，CENTUM VP R5.03.00及之前的版本，CENTUM VP Entry Class R5.03.00及之前的版本，Exaopc R3.71.02及之前的版本，B/M9000CS R5.05.01及之前的版本，B/M9000 VP R7.03.0及之前的版本。
solution:Upgrade yokogawa b/m9000cs_software to a higher version than 5.05.01,and avoid the version (,5.05.01]; Upgrade yokogawa b/m9000cs to a higher version than -; Upgrade yokogawa centum_cs_1000_software to a higher version than -; Upgrade yokogawa centum_cs_1000 to a higher version than -; Upgrade yokogawa centum_cs_3000_software to a higher version than 2.23.00,and avoid the version (,2.23.00]; Upgrade yokogawa centum_cs_3000 to a higher version than -; Upgrade yokogawa centum_cs_3000_entry_class_software to a higher version than 3.09.50,and avoid the version (,3.09.50]; Upgrade yokogawa centum_cs_3000_entry_class to a higher version than -; Upgrade yokogawa exaopc to a higher version than 3.71.02,and avoid the version (,3.71.02]; Upgrade yokogawa b/m9000_vp_software to a higher version than 7.03.01,and avoid the version (,7.03.01]; Upgrade yokogawa b/m9000_vp to a higher version than -; Upgrade yokogawa centum_vp_entry_class_software to a higher version than 5.03.00,and avoid the version (,5.03.00]; Upgrade yokogawa centum_vp_entry_class to a higher version than -; Upgrade yokogawa centum_vp_software to a higher version than 4.03.00,and avoid the version (,4.03.00]; Upgrade yokogawa centum_vp to a higher version than -