CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a (1) stop application program, (2) change value, or (3) modify application command.

• CWE-287

• http://www.securityfocus.com/bid/92981
• https://ics-cert.us-cert.gov/advisories/ICSA-16-259-01Third Party Advisory, US Government Resource
• https://web-material3.yokogawa.com/YSAR-16-0002-E.pdfVendor Advisory
• http://www.securityfocus.com/bid/92981
• https://ics-cert.us-cert.gov/advisories/ICSA-16-259-01Third Party Advisory, US Government Resource
• https://web-material3.yokogawa.com/YSAR-16-0002-E.pdfVendor Advisory

Published

Sep 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4854Cross-site request forgery (CSRF) vulnerability in L-04D fir…
• CVE-2016-4855Cross-site scripting vulnerability in ADOdb versions prior t…
• CVE-2016-4856Cross-site scripting vulnerability in Splunk Enterprise 6.3.…
• CVE-2016-4857Open redirect vulnerability in Splunk Enterprise 6.4.x prior…
• CVE-2016-4858Cross-site scripting vulnerability in Splunk Enterprise 6.4.…
• CVE-2016-4859Open redirect vulnerability in Splunk Enterprise 6.4.x prior…
• CVE-2016-4861The (1) order and (2) group methods in Zend_Db_Select in the…
• CVE-2016-4862Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bun…
• CVE-2016-4863The Toshiba FlashAir SD-WD/WC series Class 6 model with firm…
• CVE-2016-4864H2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier a…
• CVE-2016-4865Cross-site scripting vulnerability in Cybozu Office 9.0.0 to…
• CVE-2016-4866Cross-site scripting vulnerability in Cybozu Office 9.0.0 to…