CVEvulnerability

CVE-2022-29519

7.5 HIGH Published 2022-06-28 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-06-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-319

Description

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware.

Affected configurations

• yokogawa stardom fcj firmware (>= r1.01 <= r4.31) • yokogawa stardom fcn firmware (>= r1.01 <= r4.31)

Weakness · CWE (1)

CWE-319 Cleartext Transmission of Sensitive Information weakness

Referenced by CWE · observed example (2)

CWE-319 Cleartext Transmission of Sensitive Information weakness
CWE-522 Insufficiently Protected Credentials weakness

References

https://jvn.jp/vu/JVNVU95452299/index.html Mitigation, Third Party Advisory, VDB Entry
https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf Mitigation, Vendor Advisory
https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf Mitigation, Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01 Mitigation, Third Party Advisory, US Government Resource
https://jvn.jp/vu/JVNVU95452299/index.html Mitigation, Third Party Advisory, VDB Entry
https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf Mitigation, Vendor Advisory
https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf Mitigation, Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01 Mitigation, Third Party Advisory, US Government Resource