CVE-2018-17900

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-10-12

Last modified

2024-09-16

Weaknesses

CWE-522

Affected products

• Fcj Firmware (Yokogawa)
• Fcn-100 Firmware (Yokogawa)
• Fcn-500 (Yokogawa)
• Fcn-500 Firmware (Yokogawa)
• Fcn-rtu Firmware (Yokogawa)
• Stardom Controllers Fcjfcn-100fcn-rtu (Yokogawa)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03
• https://web-material3.yokogawa.com/YSAR-18-0007-E.pdf