CVE-2018-17896
Last modified
CVE-2018-17896 is a vulnerability of currently unknown severity. Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Yokogawa | Fcj Firmware | <= r4.10 |
| Yokogawa | Fcn-100 Firmware | <= r4.10 |
| Yokogawa | Fcn-Rtu Firmware | <= r4.10 |
| Yokogawa | Fcn-500 Firmware | <= r4.10 |
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03Third Party Advisory, US Government Resource
- https://web-material3.yokogawa.com/YSAR-18-0007-E.pdfVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03Third Party Advisory, US Government Resource
- https://web-material3.yokogawa.com/YSAR-18-0007-E.pdfVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-17896?
How severe is CVE-2018-17896?
How do I fix CVE-2018-17896?
Are you affected by CVE-2018-17896?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST