Use of Hard-Coded Credentials in STARDOM FCN and FCJ Controllers by Yokogawa
CVE-2022-30997
7.2HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 28 June 2022
Summary
A vulnerability affecting the STARDOM FCN Controller and FCJ Controller has been identified where hard-coded credentials are utilized. This security flaw may allow an attacker with administrative privileges to read or alter configuration settings. Furthermore, it poses a risk of enabling the update of the controller with tampered firmware, significantly compromising the system’s integrity and security.
Affected Version(s)
STARDOM Controller STARDOM FCN Controller and FCJ Controller R4.10 to R4.31
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved