Critical ICSA-18-151-03 5 CVEs

Yokogawa STARDOM Controllers (Update A)

Published May 31, 2018 · Updated Oct 11, 2018 · Revision 2

Vendor: Yokogawa Product: STARDOM Controller FCJ Product: STARDOM Controller FCN-100 Product: STARDOM Controller FCN-500 Product: STARDOM Controller FCN-RTU

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain access to the affected device, cause a denial of service, or gain unauthorized access, which could result in remote arbitrary code execution.

Vulnerabilities 5

Unscored —

CVE-2018-10592

Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and pr…

Yokogawa STARDOM FCJ Controllers STARDOM FCN-RTU Controllers STARDOM FCN-100 Controllers ICS / OT

Jul 31, 2018
Unscored —

CVE-2018-17896

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers uti…

Yokogawa STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 ICS / OT

Oct 12, 2018
Unscored —

CVE-2018-17898

Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fa…

Yokogawa STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 ICS / OT

Oct 12, 2018
Unscored —

CVE-2018-17900

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improper…

Yokogawa STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 ICS / OT

Oct 12, 2018
Unscored —

CVE-2018-17902

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes mul…

Yokogawa STARDOM Controllers FCJ,FCN-100,FCN-RTU, FCN-500 ICS / OT

Oct 12, 2018

Revision history

2018-10-11 #2
ICSA-18-151-03 Yokogawa STARDOM Controllers (Update A)
2018-05-31 #1
ICSA-18-151-03 Yokogawa STARDOM Controllers

References

ICS Advisory ICSA-18-151-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-151-03
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-151-03
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf