CVE-2022-29519

Опубликовано: 28 июн. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 7.9

EPSS Низкий

Описание

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware.

Ссылки

https://jvn.jp/vu/JVNVU95452299/index.html
Mitigation
Third Party Advisory
VDB Entry
https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf
Mitigation
Vendor Advisory
https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf
Mitigation
Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01
Mitigation
Third Party Advisory
US Government Resource
https://jvn.jp/vu/JVNVU95452299/index.html
Mitigation
Third Party Advisory
VDB Entry
https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf
Mitigation
Vendor Advisory
https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf
Mitigation
Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:yokogawa:stardom_fcj_firmware:*:*:*:*:*:*:*:*

Версия от r1.01 (включая) до r4.31 (включая)

cpe:2.3:h:yokogawa:stardom_fcj:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:yokogawa:stardom_fcn_firmware:*:*:*:*:*:*:*:*

Версия от r1.01 (включая) до r4.31 (включая)

cpe:2.3:h:yokogawa:stardom_fcn:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00153

Низкий

7.5 High

CVSS3

7.9 High

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-ggvq-gj5r-78q8