Resource exhaustion in Yokogawa Stardom Fcj
CVE-2023-5915
A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet, the maintenance homepage of the controller could not be accessed. Therefore, functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller’s operation is not stopped by the condition. The affected products and versions are as follows: STARDOM FCN/FCJ R1.01 to R4.31.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Yokogawa Stardom_fcj
- Yokogawa Stardom_fcj_firmware
- Yokogawa Stardom_fcn
- Yokogawa Stardom_fcn_firmware
- Yokogawa Electric Corporation Stardom — versions STARDOM FCN/FCJ R1.01 to R4.31
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 7168b535-132a-4efe-a076-338f829b2eb9 (Mitigation, Vendor Advisory)
- 7168b535-132a-4efe-a076-338f829b2eb9 (US Government Resource, Third Party Advisory, Mitigation)
- 7168b535-132a-4efe-a076-338f829b2eb9 (Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2023-5915?
- CVE-2023-5915 is a medium-severity vulnerability in Yokogawa Stardom Fcj, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2023-12-01.
- How severe is CVE-2023-5915?
- Medium severity. CVSS v3 base score is 5.3 out of 10.
- Is CVE-2023-5915 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.