CVE-2018-10592

Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that could allow an attacker to gain unauthorized administrative access to the device, which could result in remote code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-07-31

Last modified

2024-09-16

Weaknesses

CWE-798

Affected products

• Fcj Firmware (Yokogawa)
• Fcn-100 Firmware (Yokogawa)
• Fcn-500 Firmware (Yokogawa)
• Fcn-rtu Firmware (Yokogawa)
• Stardom Fcj Controllers (Yokogawa)
• Stardom Fcn-100 Controllers (Yokogawa)
• Stardom Fcn-500 Controllers (Yokogawa)
• Stardom Fcn-rtu Controllers (Yokogawa)

References

• http://www.securityfocus.com/bid/104376
• https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03
• https://web-material3.yokogawa.com/1/6712/details/YSAR-18-0004-E.pdf