Yokogawa STARDOM 信任管理问题漏洞

Yokogawa STARDOM is a series of intelligent control systems from Yokogawa Electric Yokogawa, Japan. A security vulnerability exists in the Yokogawa STARDOM. An attacker could use this vulnerability to read or change configuration settings or update the controller to tamper with the firmware...

Yokogawa STARDOM 安全漏洞

Yokogawa STARDOM is a series of intelligent control systems from Yokogawa Electric Yokogawa Corporation, Japan. A security vulnerability exists in Yokogawa STARDOM that originates from the affected product transmitting sensitive information in clear text...

The vulnerability of microprogrammed software for STARDOM FCN/FCJ programmable logic controllers lies in the possibility of using hard-coded account data, allowing an intruder to gain access to the device.

The vulnerability of microprogrammed software in STARDOM FCN/FCJ programmable logic controllers is related to the possibility of using strictly encrypted account data. Exploiting this vulnerability can allow a remote attacker to gain access to the device...

Yokogawa STARDOM

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely Vendor: Yokogawa Equipment: STARDOM Vulnerabilities: Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials CISA is aware of a public report known as, “OT:ICEFALL,” which details vulnerabilities found in...

CISA Releases Security Advisories Related to OT:ICEFALL (Insecure by Design) Report

CISA is aware that Forescout researchers have released OT:ICEFALL, a report on 56 vulnerabilities caused by insecure-by-design practices in operational technology across multiple vendors. The vulnerabilities are divided into four main categories: insecure engineering protocols, weak cryptography ...

PT-2022-3043 · Unknown · Stardom Fcn Controller

Name of the Vulnerable Software and Affected Versions: STARDOM FCN Controller and FCJ Controller versions R4.10 through R4.31 Description: A use of hard-coded credentials issue exists, which may allow an attacker with administrative privilege to read or change configuration settings, or update th...

Yokogawa iDefine, STARDOM, ASTPLANNER, and TriFellows Stack-Based Buffer Overflow (CVE-2018-0651)

Buffer overflow in the license management function of YOKOGAWA products iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier allows remote attackers to stop the license...

CVE-2015-5627: Out-of-bounds Write

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

Yokogawa STARDOM Controllers < R4.02 Hardcoded Credentials

Binary data 720135.prm...

Yokogawa STARDOM Controllers <= R4.10 Session Fixation

Binary data 720140.prm...

Yokogawa STARDOM Controllers <= R4.10 Resource Exhaustion

Binary data 720138.prm...

Yokogawa STARDOM FCN/FCJ Controllers R1.01 <= R4.01 Authentication Bypass

Binary data 720082.prm...

Yokogawa STARDOM Controllers <= R4.10 Insufficiently Protected Credentials

Binary data 720139.prm...

Yokogawa STARDOM Controllers <= R4.10 Hardcoded Credentials

Binary data 720137.prm...

CVE-2018-0651

Buffer overflow in the license management function of YOKOGAWA products iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier allows remote attackers to stop the license...

CVE-2018-0651

Buffer overflow in the license management function of YOKOGAWA products iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier allows remote attackers to stop the license...

CVE-2018-0651: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the license management function of YOKOGAWA products iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier allows remote attackers to stop the license...

CVE-2018-17902

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions...

CVE-2018-17898

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

CVE-2018-17900

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers...