PT-2018-14253 · Yokogawa · Yokogawa Stardom Controllers

Published 2018-10-12 · Updated 2019-10-09 · CVE-2018-17900

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Yokogawa STARDOM Controllers versions prior to R4.10

Description The web application in Yokogawa STARDOM Controllers improperly protects credentials, which could allow an attacker to obtain credentials for remote access to the controllers.

Recommendations For versions prior to R4.10, update to a version later than R4.10 to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2018-17900

Affected Products

Yokogawa Stardom Controllers

References · 4

• https://osv.dev/vulnerability/CVE-2018-17900 · Vendor Advisory
• https://web-material3.yokogawa.com/YSAR-18-0007-E.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17900 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03 · Note