Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior
Críticas / altas1285▼ 65 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.3) | 1.1% | — | Yokogawa FCJ FirmwareYokogawa Fcn-100 FirmwareYokogawa Fcn-rtu FirmwareYokogawa Fcn-500 Firmware | 12/10/2018 | 17/6/2026 | Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The application utilizes multiple methods of session management which could result in a denial of service to the remote management functions. | |
| Modificada | Crítica (9.8) | 1.9% | — | Yokogawa FCJ FirmwareYokogawa Fcn-100 FirmwareYokogawa Fcn-rtu FirmwareYokogawa Fcn-500 Firmware | 12/10/2018 | 17/6/2026 | Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The web application improperly protects credentials which could allow an attacker to obtain credentials for remote access to controllers. | |
| Modificada | Alta (7.5) | 1.3% | — | Yokogawa FCJ FirmwareYokogawa Fcn-100 FirmwareYokogawa Fcn-rtu FirmwareYokogawa Fcn-500 Firmware | 12/10/2018 | 17/6/2026 | Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable. | |
| Modificada | Alta (8.1) | 1.2% | — | Yokogawa FCJ FirmwareYokogawa Fcn-100 FirmwareYokogawa Fcn-rtu FirmwareYokogawa Fcn-500 Firmware | 12/10/2018 | 17/6/2026 | Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work. | |
| Modificada | Crítica (9.8) | 6.9% | — | Yokogawa FCJ FirmwareYokogawa Fcn-100 FirmwareYokogawa Fcn-rtu FirmwareYokogawa Fcn-500 Firmware | 31/7/2018 | 17/6/2026 | Yokogawa STARDOM FCJ controllers R4.02 and prior, FCN-100 controllers R4.02 and prior, FCN-RTU controllers R4.02 and prior, and FCN-500 controllers R4.02 and prior utilize hard-coded credentials that could allow an attacker to gain unauthorized administrative access to the device, which could result in remote code… |