5.3

CVE-2023-5915

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet, the maintenance homepage of the controller could not be accessed. Therefore, functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller’s operation is not stopped by the condition.

The affected products and versions are as follows: STARDOM FCN/FCJ R1.01 to R4.31.

Data is provided by the National Vulnerability Database (NVD)
Yokogawa ≫ Stardom Fcj Firmware Version >= r1.01 <= r4.31
   Yokogawa ≫ Stardom Fcj Version-
Yokogawa ≫ Stardom Fcn Firmware Version >= r1.01 <= r4.31
   Yokogawa ≫ Stardom Fcn Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.43% 0.61
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://jvn.jp/vu/JVNVU95177889/index.html
Third Party Advisory
Mitigation
https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-02
Third Party Advisory
US Government Resource
Mitigation