2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"FAST/TOOLS","vendor":"Yokogawa Electric Corporation","versions":[{"lessThanOrEqual":"R10.04","status":"affected","version":"R9.01","versionType":"custom"}]},{"defaultStatus":"unknown","product":"CI Server","vendor":"Yokogawa Electric Corporation","versions":[{"lessThanOrEqual":"R1.03.00","status":"affected","version":"R1.01.00","versionType":"custom"}]}],"source":"7168b535-132a-4efe-a076-338f829b2eb9"},{"affectedData":[{"cpes":["cpe:2.3:a:yokogawa_electric_corporation:fast_tools:r901:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"fast_tools","vendor":"yokogawa_electric_corporation","versions":[{"lessThanOrEqual":"R10.04","status":"affected","version":"r901","versionType":"custom"}]},{"cpes":["cpe:2.3:a:yokogawa_electric_corporation:ci_server:r1.01.00:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"ci_server","vendor":"yokogawa_electric_corporation","versions":[{"lessThanOrEqual":"R1.03.00","status":"affected","version":"r1.01.00","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a password set by default, an attacker can break into the affected product.\nThe affected products and versions are as follows:\nFAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04\nCI Server R1.01.00 to R1.03.00"},{"lang":"es","value":"Se ha encontrado una vulnerabilidad en FAST/TOOLS y CI Server. Los productos afectados tienen cuentas integradas sin contraseñas establecidas. Por lo tanto, si el producto se utiliza sin una contraseña predeterminada, un atacante puede acceder al producto afectado. Los productos y versiones afectados son los siguientes: FAST/TOOLS (Paquetes: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 a R10.04 CI Server R1.01.00 a R1.03.00"}],"id":"CVE-2024-4106","lastModified":"2026-06-17T08:01:08.890","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"7168b535-132a-4efe-a076-338f829b2eb9","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4106","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-06-26T13:07:16.655100Z","version":"2.0.3"}}]},"published":"2024-06-26T06:15:15.830","references":[{"source":"7168b535-132a-4efe-a076-338f829b2eb9","url":"https://web-material3.yokogawa.com/1/36059/files/YSAR-24-0001-E.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://web-material3.yokogawa.com/1/36059/files/YSAR-24-0001-E.pdf"}],"sourceIdentifier":"7168b535-132a-4efe-a076-338f829b2eb9","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-258"}],"source":"7168b535-132a-4efe-a076-338f829b2eb9","type":"Secondary"}]}
|