CVE-2018-17896
8.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD
Description
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.
Affected (4)
Products: Yokogawa: Fcj Firmware, Fcn 100 Firmware, Fcn Rtu Firmware, Fcn 500 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to r4.10 |
| Running on/with | Platform Versions |
|---|---|
Yokogawa Fcj | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to r4.10 |
| Running on/with | Platform Versions |
|---|---|
Yokogawa Fcn 100 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to r4.10 |
| Running on/with | Platform Versions |
|---|---|
Yokogawa Fcn Rtu | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to r4.10 |
| Running on/with | Platform Versions |
|---|---|
Yokogawa Fcn 500 | All versions |
References (4)
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.