Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware.
Se presenta una vulnerabilidad de transmisión de texto sin cifrar de información confidencial en STARDOM FCN Controller y FCJ Controller versiones R1.01 a R4.31, que puede permitir a un atacante adyacente iniciar sesión en los productos afectados y alterar los ajustes de configuración del dispositivo o manipular el firmware del mismo
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | ADJACENT_NETWORK |
|---|---|
| Attack Complexity | HIGH |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:A/AC:M/Au:N/C:C/I:C/A:C
| Access Vector | ADJACENT_NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | COMPLETE |
| Integrity Impact | COMPLETE |
| Availability Impact | COMPLETE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-319
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| yokogawa | stardom_fcj_firmware | * | <built-in method update of dict object at 0x7e6108beae40> | Operating System |
| yokogawa | stardom_fcn_firmware | * | <built-in method update of dict object at 0x7e6108beac40> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:yokogawa:stardom_fcj_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:yokogawa:stardom_fcj:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:yokogawa:stardom_fcn_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:yokogawa:stardom_fcn:-:*:*:*:*:*:*:* |