CVE-2018-17902

Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03 Third Party Advisory US Government Resource
https://web-material3.yokogawa.com/YSAR-18-0007-E.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:yokogawa:fcj_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:yokogawa:fcj:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:yokogawa:fcn-100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:yokogawa:fcn-100:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:yokogawa:fcn-rtu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:yokogawa:fcn-rtu:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:yokogawa:fcn-500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:yokogawa:fcn-500:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-10-12 14:29

Updated : 2024-02-28 16:48


NVD link : CVE-2018-17902

Mitre link : CVE-2018-17902

CVE.ORG link : CVE-2018-17902


JSON object : View

Products Affected

yokogawa

  • fcn-100
  • fcn-500
  • fcn-100_firmware
  • fcn-500_firmware
  • fcj_firmware
  • fcn-rtu_firmware
  • fcn-rtu
  • fcj
CWE
CWE-384

Session Fixation