Yokogawa Fcn-Rtu Firmware vulnerabilities

5 CVEs affecting Yokogawa Fcn-Rtu Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-17902, published 2018-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10592, published 2018-07-31. Critical severity, CVSS 9.8. EPSS: 6.9% chance of exploitation in the next 30 days. Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that…
CVE-2018-17900, published 2018-10-12. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for…
CVE-2018-17898, published 2018-10-12. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an…
CVE-2018-17896, published 2018-10-12. High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days. Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access…
CVE-2018-17902, published 2018-10-12. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to…