ICSA-22-174-01

icsaUScisa_csaf_ot

Yokogawa STARDOM

view advisory published 2022-06-23

Successful exploitation of these vulnerabilities could allow attackers to alter device configuration settings and tamper with device firmware.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-30997UShigh7.2OT elevated—
Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read…
CVE-2022-29519UShigh7.5OT elevated—
Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationSTARDOM FCN/FCJ

    Enable the packet filtering functionality of the FCN/FCJ controller to only allow connections from trusted hosts.

  • MitigationSTARDOM FCN/FCJ

    Enable the packet filtering functionality of the FCN/FCJ controller to only allow connections from trusted hosts.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan