EUVD-2018-9641

Malware in sbrugna...

EUVD-2018-9637

Malware in sbrugna...

EUVD-2018-9639

Malware in sbrugna...

Yokogawa STARDOM Controllers <= R4.10 Resource Exhaustion

Binary data 720138.prm...

CVE-2018-17900

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers...

CVE-2018-17900

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers...

CVE-2018-17898

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

PT-2018-14254

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM Controllers versions prior to R4.10 Description The issue concerns the application's session management, which could lead to a denial of service affecting the remote management functions. Recommendations For versions prior to...

CVE-2018-17900: Insufficiently Protected Credentials

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers...

CVE-2018-17902: Session Fixation

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions...

CVE-2018-17896: Use of Hard-coded Credentials

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only...

PT-2018-14252

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM Controllers versions R4.10 and prior Description The controller application fails to prevent memory exhaustion by unauthorized requests, which could allow an attacker to cause the controller to become unstable. Recommendations...

CVE-2018-17898: Uncontrolled Resource Consumption

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable...

PT-2018-14253

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM Controllers versions prior to R4.10 Description The web application in Yokogawa STARDOM Controllers improperly protects credentials, which could allow an attacker to obtain credentials for remote access to the controllers...

PT-2018-3923

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500 versions R4.10 and prior Description The issue concerns the use of hard-coded credentials in the affected controllers, which may allow an attacker to gain unauthorized access to...