Vulnerability Details CVE-2018-17896
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 48.0%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 9.3
Products affected by CVE-2018-17896
-
-
cpe:2.3:h:yokogawa:fcn-100:-
-
cpe:2.3:h:yokogawa:fcn-500:-
-
cpe:2.3:h:yokogawa:fcn-rtu:-
-
cpe:2.3:o:yokogawa:fcj_firmware:r1.60
-
cpe:2.3:o:yokogawa:fcj_firmware:r1.70
-
cpe:2.3:o:yokogawa:fcj_firmware:r1.80
-
cpe:2.3:o:yokogawa:fcj_firmware:r1.85
-
cpe:2.3:o:yokogawa:fcj_firmware:r1.86
-
cpe:2.3:o:yokogawa:fcj_firmware:r1.90
-
cpe:2.3:o:yokogawa:fcj_firmware:r2.01
-
cpe:2.3:o:yokogawa:fcj_firmware:r2.10
-
cpe:2.3:o:yokogawa:fcj_firmware:r2.20
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.01
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.02
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.03
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.10
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.20
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.30
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.40
-
cpe:2.3:o:yokogawa:fcj_firmware:r3.50
-
cpe:2.3:o:yokogawa:fcj_firmware:r4.02
-
cpe:2.3:o:yokogawa:fcj_firmware:r4.10
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r1.60
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r1.70
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r1.80
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r1.85
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r1.86
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r1.90
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r2.01
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r2.10
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r2.20
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.01
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.02
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.03
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.10
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.20
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.30
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.40
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r3.50
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r4.02
-
cpe:2.3:o:yokogawa:fcn-100_firmware:r4.10
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r1.60
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r1.70
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r1.80
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r1.85
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r1.86
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r1.90
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r2.01
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r2.10
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r2.20
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.01
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.02
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.03
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.10
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.20
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.30
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.40
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r3.50
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r4.02
-
cpe:2.3:o:yokogawa:fcn-500_firmware:r4.10
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r1.60
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r1.70
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r1.80
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r1.85
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r1.86
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r1.90
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r2.01
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r2.10
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r2.20
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.01
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.02
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.03
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.10
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.20
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.30
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.40
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r3.50
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r4.02
-
cpe:2.3:o:yokogawa:fcn-rtu_firmware:r4.10