Use of hard-coded credentials in Yokogawa products - CVE-2018-10592
Published: May 30, 2018 / Updated: June 1, 2018
Vulnerability identifier: #VU13118
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10592
CWE-ID: CWE-798
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain elevated privieleges on the target system.
The vulnerability exists due to use of hard-coded credentials. A remote unauthenticated attacker can use these credentials to gain elevated privileges and execute arbitrary code.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
STARDOM FCN-500
STARDOM FCN-RTU
STARDOM FCN-100
STARDOM FCJ
STARDOM FCN-RTU
STARDOM FCN-100
STARDOM FCJ
How to mitigate CVE-2018-10592
Update to version 4.10.