CVE-2025-1863

Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default settings, anyone can access all functions related to settings and operations. As a result, an attacker can illegally manipulate and configure important data such as measured values and settings. This issue affects GX10 / GX20 / GP10 / GP20 Paperless Recorders: R5.04.01 or earlier; GM Data Acquisition System: R5.05.01 or earlier; DX1000 / DX2000 / DX1000N Paperless Recorders: R4.21 or earlier; FX1000 Paperless Recorders: R1.31 or earlier; μR10000 / μR20000 Chart Recorders: R1.51 or earlier; MW100 Data Acquisition Units: All versions; DX1000T / DX2000T Paperless Recorders: All versions; CX1000 / CX2000 Paperless Recorders: All versions.

• CWE-1188

• https://web-material3.yokogawa.com/1/36974/files/YSAR-25-0001-E.pdf

Published

Apr 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1857A vulnerability classified as critical has been found in PHP…9.8
• CVE-2025-1858A vulnerability classified as critical was found in Codezips…9.8
• CVE-2025-1859A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-1860Data::Entropy for Perl 0.007 and earlier use the rand() func…7.7
• CVE-2025-1861In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, f…9.8
• CVE-2025-1862An arbitrary file upload vulnerability exists in multiple WS…7.2
• CVE-2025-1864Improper Restriction of Operations within the Bounds of a Me…9.8
• CVE-2025-1865The kernel driver, accessible to low-privileged users, expos…8.5
• CVE-2025-1866Improper Restriction of Operations within the Bounds of a Me…10
• CVE-2025-1867Inconsistent Interpretation of HTTP Requests ('HTTP Request/…10
• CVE-2025-1868Vulnerability of unauthorized exposure of confidential infor…6.9
• CVE-2025-1869SQL injection vulnerability have been found in 101news affec…9.8