CVE-2022-30997
First published: Tue Jun 28 2022(Updated: )
Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read/change configuration settings or update the controller with tampered firmware.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Yokogawa STARDOM FCN/FCJ | ||
| Yokogawa STARDOM FCN/FCJ | ||
| All of | ||
| Yokogawa Stardom Fcj Firmware | >=r4.10<=r4.31 | |
| Yokogawa STARDOM FCN/FCJ | ||
| All of | ||
| Yokogawa Stardom Fcn Firmware | >=r4.10<=r4.31 | |
| Yokogawa STARDOM FCN/FCJ | ||
| Yokogawa Stardom Fcj Firmware | >=r4.10<=r4.31 | |
| Yokogawa STARDOM FCN/FCJ | ||
| Yokogawa Stardom Fcn Firmware | >=r4.10<=r4.31 | |
| Yokogawa STARDOM FCN/FCJ |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://jvn.jp/vu/JVNVU95452299/index.html
- https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf
- https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-174-01 (Advisory)
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2022-30997.
What is the severity of CVE-2022-30997?
The severity of CVE-2022-30997 is critical with a CVSS score of 7.2.
Which software versions are affected by CVE-2022-30997?
STARDOM FCN Controller and FCJ Controller versions R4.10 to R4.31 are affected by CVE-2022-30997.
What can an attacker do with this vulnerability?
An attacker with administrative privilege can read/change configuration settings or update the controller with tampered firmware.
Where can I find more information about CVE-2022-30997?
You can find more information about CVE-2022-30997 at the following references: [link1](https://jvn.jp/vu/JVNVU95452299/index.html), [link2](https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf), [link3](https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf).
- agent/type
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- collector/nvd-index
- vendor/yokogawa
- canonical/yokogawa stardom fcn/fcj
- canonical/yokogawa stardom fcj firmware
- version/yokogawa stardom fcj firmware/r4.10
- version/yokogawa stardom fcj firmware/r4.31
- canonical/yokogawa stardom fcn firmware
- version/yokogawa stardom fcn firmware/r4.10
- version/yokogawa stardom fcn firmware/r4.31