CVE-2016-4860

Опубликовано: 19 сент. 2016

Источник: nvd

CVSS3: 7.3

CVSS2: 7.5

EPSS Низкий

Описание

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a (1) stop application program, (2) change value, or (3) modify application command.

Ссылки

http://www.securityfocus.com/bid/92981
https://ics-cert.us-cert.gov/advisories/ICSA-16-259-01
Third Party Advisory
US Government Resource
https://web-material3.yokogawa.com/YSAR-16-0002-E.pdf
Vendor Advisory
http://www.securityfocus.com/bid/92981
https://ics-cert.us-cert.gov/advisories/ICSA-16-259-01
Third Party Advisory
US Government Resource
https://web-material3.yokogawa.com/YSAR-16-0002-E.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:yokogawa:stardom_fcn\/fcj:r1.01:*:*:*:*:*:*:*

cpe:2.3:a:yokogawa:stardom_fcn\/fcj:r2.01:*:*:*:*:*:*:*

cpe:2.3:a:yokogawa:stardom_fcn\/fcj:r3.01:*:*:*:*:*:*:*

cpe:2.3:a:yokogawa:stardom_fcn\/fcj:r4.01:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.00923

Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-3v33-px63-8phx