CVE-2022-30997

Katalog CVE

CVSS 7.2 · High EPSS 1,6%

Kerentanan Use of Hard-coded Credentials pada yokogawa stardom fcj firmware, yokogawa stardom fcn firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read/change configuration settings or update the controller with tampered firmware.

Rincian

Terbit di NVD

28 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 74,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://web-material3.yokogawa.com/1/32885/files/YSAR-22-0007-E.pdf mitigasi · advisory vendor
• https://web-material3.yokogawa.com/19/32885/files/YSAR-22-0007-J.pdf mitigasi · advisory vendor
• https://jvn.jp/vu/JVNVU95452299/index.html mitigasi · advisory pihak ketiga · vdb entry
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-01 mitigasi · advisory pihak ketiga · pemerintah AS