Yokogawa Recorder Products

Summary

Vulnerabilities 1

• Critical 9.8
  CVE-2025-1863

  Insecure default settings for recorder products

  Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default settings, an…

  Yokogawa Electric MW100 Data Acquisition Units CX1000 / CX2000 Paperless Recorders GX10 / GX20 / GP10 / GP20 Paperless Recorders ICS / OT
  Apr 18, 2025

Revision history

1. 2025-04-17 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-107-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-04
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014