CVE-2018-17902

🗓️ 12 Oct 2018 14:00:00Reported by icscertType

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, versions R4.10 & prior, multiple session management methods may lead to denial of service

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	Yokogawa STARDOM Controllers <= R4.10 Session Fixation	8 May 201900:00	–	nessus
Cvelist	CVE-2018-17902	12 Oct 201814:00	–	cvelist
EUVD	EUVD-2018-9643	7 Oct 202500:30	–	euvd
NVD	CVE-2018-17902	12 Oct 201814:29	–	nvd
OSV	CVE-2018-17902	12 Oct 201814:29	–	osv
Prion	Session fixation	12 Oct 201814:29	–	prion

NVD

Vulners

Node

yokogawa fcj_firmwareRange≤r4.10

AND

yokogawa fcjMatch-

Node

yokogawa fcn-100_firmwareRange≤r4.10

AND

yokogawa fcn-100Match-

Node

yokogawa fcn-rtu_firmwareRange≤r4.10

AND

yokogawa fcn-rtuMatch-

Node

yokogawa fcn-500_firmwareRange≤r4.10

AND

yokogawa fcn-500Match-

[
  {
    "product": "STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500",
    "vendor": "Yokogawa",
    "versions": [
      {
        "status": "affected",
        "version": "All versions R4.10 and prior"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-151-03
web-material3	www.web-material3.yokogawa.com/YSAR-18-0007-E.pdf

21 Nov 2024 03:55Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 35.3

EPSS0.00249

CWE-384