CVE-2018-10592

🗓️ 31 Jul 2018 17:00:00Reported by icscertType

Yokogawa STARDOM controllers prior to R4.02 have hard-coded credentials, leading to unauthorized admin access and remote code execution

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	Yokogawa STARDOM Controllers < R4.02 Hardcoded Credentials	8 May 201900:00	–	nessus
Circl	CVE-2018-10592	1 Jun 201809:28	–	circl
CNVD	Multiple Yokogawa Product Security Bypass Vulnerabilities	6 Jun 201800:00	–	cnvd
Cvelist	CVE-2018-10592	31 Jul 201817:00	–	cvelist
EUVD	EUVD-2018-2664	7 Oct 202500:30	–	euvd
NVD	CVE-2018-10592	31 Jul 201817:29	–	nvd
OSV	CVE-2018-10592	31 Jul 201817:29	–	osv
Prion	Hardcoded credentials	31 Jul 201817:29	–	prion

NVD

Vulners

Node

yokogawa fcj_firmwareRange≤r4.02

AND

yokogawa fcjMatch-

Node

yokogawa fcn-100_firmwareRange≤r4.02

AND

yokogawa fcn-100Match-

Node

yokogawa fcn-rtu_firmwareRange≤r4.02

AND

yokogawa fcn-rtuMatch-

Node

yokogawa fcn-500_firmwareRange≤r4.02

AND

yokogawa fcn-500Match-

[
  {
    "product": "STARDOM FCJ Controllers",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R4.02 and prior"
      }
    ]
  },
  {
    "product": "STARDOM FCN-100 Controllers",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R4.02 and prior"
      }
    ]
  },
  {
    "product": "STARDOM FCN-RTU Controllers",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R4.02 and prior"
      }
    ]
  },
  {
    "product": "STARDOM FCN-500 Controllers",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "R4.02 and prior"
      }
    ]
  }
]

Source	Link
web-material3	www.web-material3.yokogawa.com/1/6712/details/YSAR-18-0004-E.pdf
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-151-03
securityfocus	www.securityfocus.com/bid/104376

21 Nov 2024 03:41Current

9.7High risk

Vulners AI Score9.7

CVSS 39.8

CVSS 210

EPSS0.0649

CWE-798