← Back

CVE-2022-30997

nvd nist
Published: Jun 28, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read/change configuration settings or update the controller with tampered firmware.

Affected (2)

Yokogawa
2 products
Stardom Fcj Firmware
Stardom Fcn Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Stardom Fcj Firmware
From r4.10 to r4.31
Running on/withPlatform Versions
Yokogawa
Stardom Fcj
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Stardom Fcn Firmware
From r4.10 to r4.31
Running on/withPlatform Versions
Yokogawa
Stardom Fcn
All versions

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (8)

Source: vultures@jpcert.or.jp
MitigationThird Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
MitigationVendor Advisory
Source: vultures@jpcert.or.jp
MitigationVendor Advisory
Source: vultures@jpcert.or.jp
MitigationThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.