CVE-2018-17896

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.

Score

CVSS 3.0 8.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-10-12

Last modified

2024-09-17

Weaknesses

CWE-798

Affected products

• Fcj Firmware (Yokogawa)
• Fcn-100 Firmware (Yokogawa)
• Fcn-500 (Yokogawa)
• Fcn-500 Firmware (Yokogawa)
• Fcn-rtu Firmware (Yokogawa)
• Stardom Controllers Fcjfcn-100fcn-rtu (Yokogawa)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03
• https://web-material3.yokogawa.com/YSAR-18-0007-E.pdf