module

Yokogawa CENTUM CS 3000 BKCLogSvr.exe Heap Buffer Overflow

Try Surface Command
Back to search
Disclosed
2014-03-10
Created
2018-05-30

Description

This module abuses a buffer overflow vulnerability to trigger a Denial of Service
of the BKCLogSvr component in the Yokogaca CENTUM CS 3000 product. The vulnerability
exists in the handling of malformed log packets, with an unexpected long level field.
The root cause of the vulnerability is a combination of usage of uninitialized memory
from the stack and a dangerous string copy. This module has been tested successfully
on Yokogawa CENTUM CS 3000 R3.08.50.

Authors

juan vazquez juan.vazquez@metasploit.com
Redsadic julian.vilas@gmail.com

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use auxiliary/dos/scada/yokogawa_logsvr
    msf auxiliary(yokogawa_logsvr) > show actions
        ...actions...
    msf auxiliary(yokogawa_logsvr) > set ACTION < action-name >
    msf auxiliary(yokogawa_logsvr) > show options
        ...show and set options...
    msf auxiliary(yokogawa_logsvr) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today