Vulnerability Details : CVE-2023-5915
A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet, the maintenance homepage of the controller could not be accessed. Therefore, functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller’s operation is not stopped by the condition.
The affected products and versions are as follows: STARDOM FCN/FCJ R1.01 to R4.31.
Vulnerability category: Denial of service
Products affected by CVE-2023-5915
- cpe:2.3:o:yokogawa:stardom_fcj_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yokogawa:stardom_fcn_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-5915
0.33%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 53 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-5915
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
3.9
|
1.4
|
NIST |
CWE ids for CVE-2023-5915
-
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.Assigned by: 7168b535-132a-4efe-a076-338f829b2eb9 (Secondary)
References for CVE-2023-5915
-
https://jvn.jp/vu/JVNVU95177889/index.html
JVNVU#95177889: 横河電機製STARDOMにおけるリソース枯渇の脆弱性Mitigation;Third Party Advisory
-
https://web-material3.yokogawa.com/1/35463/files/YSAR-23-0003-E.pdf
Mitigation;Vendor Advisory
-
https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-02
Yokogawa STARDOM | CISAMitigation;Third Party Advisory;US Government Resource
Jump to