CVE-2022-29519

EUVD-2022-33856
Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
yokogawastardom_fcj_firmware
r1.01 ≤
𝑥
≤ r4.31
yokogawastardom_fcn_firmware
r1.01 ≤
𝑥
≤ r4.31
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jvn.jp/vu/JVNVU95452299/index.html
https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf
https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01
https://jvn.jp/vu/JVNVU95452299/index.html
https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf
https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01