critical9.8
CVE-2018-10592
Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and p…
Impact
Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that could allow an attacker to gain unauthorized administrative access to the device, which could result in remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yokogawa | Fcj Firmware | through r4.02 |
| Yokogawa | Fcn-100 Firmware | through r4.02 |
| Yokogawa | Fcn-Rtu Firmware | through r4.02 |
| Yokogawa | Fcn-500 Firmware | through r4.02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104376
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03
- https://web-material3.yokogawa.com/1/6712/details/YSAR-18-0004-E.pdf
- http://www.securityfocus.com/bid/104376
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03
- https://web-material3.yokogawa.com/1/6712/details/YSAR-18-0004-E.pdf