Cleartext Transmission Vulnerability in STARDOM FCN and FCJ Controllers by Yokogawa
CVE-2022-29519

7.5HIGH

Key Information:

Vendor
Yokogawa Electric Corporation
Status
Stardom Controller
Vendor
CVE Published:
28 June 2022

Summary

A vulnerability exists within the STARDOM FCN and FCJ Controllers, allowing cleartext transmission of sensitive information. This exposure may enable an adjacent attacker to gain unauthorized access, manipulate device configurations, or compromise firmware integrity, posing significant security risks to the affected systems.

Affected Version(s)

STARDOM Controller STARDOM FCN Controller and FCJ Controller R1.01 to R4.31

References

https://web-material3.yokogawa.com/1/32885/files/YSAR-22-...
x_refsource_MISC
https://web-material3.yokogawa.com/19/32885/files/YSAR-22...
x_refsource_MISC
https://jvn.jp/vu/JVNVU95452299/index.html
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.