Approved changes feed: RSS · Atom

cpe:2.3:a:yokogawa:stardom_controllers_fcj,fcn-100,fcn-rtu,_fcn-500:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYokogawa (2f463e4a-4c93-5f61-82ea-07a016e0c34f)
ProductStardom Controllers Fcj,Fcn 100,Fcn Rtu, Fcn 500 (d10cde95-a6ff-51ca-a831-fed65ec14d22)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17902 vulnerable 2026-06-08 05:11:06.864156 Details available
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions.
Published: 2018-10-12T14:00:00.000Z
Updated: 2024-09-16T18:34:00.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17900 vulnerable 2026-06-08 05:11:06.863329 Details available
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers.
Published: 2018-10-12T14:00:00.000Z
Updated: 2024-09-16T19:37:05.913Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17898 vulnerable 2026-06-08 05:11:06.862236 Details available
Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable.
Published: 2018-10-12T14:00:00.000Z
Updated: 2024-09-17T01:01:51.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17896 vulnerable 2026-06-08 05:11:06.855995 Details available
Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.
Published: 2018-10-12T14:00:00.000Z
Updated: 2024-09-17T00:26:50.260Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.