CVE-2016-4860
Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a (1) stop application program, (2) change value, or (3) modify application command.
- Score
- CVSS 3.0 7.3 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2016-09-19
- Last modified
- 2024-08-06
- Weaknesses
- CWE-287
Affected products
References
- http://www.securityfocus.com/bid/92981
- https://ics-cert.us-cert.gov/advisories/ICSA-16-259-01
- https://web-material3.yokogawa.com/YSAR-16-0002-E.pdf
