CVE-2016-4860 in STARDOM FCN-FCJ
Summary
by MITRE
Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a (1) stop application program, (2) change value, or (3) modify application command.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 04/19/2019
The vulnerability identified as CVE-2016-4860 affects Yokogawa STARDOM FCN/FCJ controllers running firmware versions R1.01 through R4.01, representing a critical security flaw in industrial control systems that undermines the fundamental principles of authentication and access control. This vulnerability resides in the Logic Designer component of these controllers, which is designed for configuration and programming of industrial automation processes. The absence of authentication requirements for Logic Designer connections creates an exploitable entry point that allows unauthorized remote access to critical industrial control functions. The flaw specifically impacts the controller's ability to maintain secure communication channels, as it fails to verify the identity of users attempting to establish connections to the Logic Designer interface.
The technical implementation of this vulnerability stems from the controller's failure to enforce proper authentication mechanisms before granting access to sensitive operational commands. When an attacker establishes a connection to the Logic Designer interface, no credentials are required to perform critical operations including stopping application programs, changing system values, or modifying application commands. This authentication bypass enables attackers to manipulate the controller's operational state without authorization, fundamentally compromising the integrity and availability of the industrial control system. The vulnerability is particularly concerning because it affects the core operational capabilities of the controller, allowing for both configuration changes and potential system disruption through simple remote connections.
The operational impact of this vulnerability extends beyond simple unauthorized access, as it provides attackers with the capability to perform destructive actions that can compromise industrial processes and potentially cause physical harm. Attackers can stop application programs which may result in production line shutdowns or process failures, change system values that could lead to unsafe operating conditions, or modify application commands that alter the intended behavior of industrial processes. This vulnerability directly impacts the availability and integrity of industrial control systems, potentially leading to significant financial losses, safety hazards, or environmental damage depending on the industrial sector affected. The remote nature of the attack means that threat actors can exploit this vulnerability from outside the industrial network perimeter, making it particularly dangerous in environments where physical security measures may not adequately protect against cyber threats.
Organizations should implement immediate mitigations including network segmentation to isolate these controllers from general network access, deployment of network access controls to restrict connections to the Logic Designer interface, and implementation of secure remote access solutions with proper authentication mechanisms. The vulnerability aligns with CWE-287, which addresses improper authentication issues in software systems, and maps to ATT&CK techniques related to initial access through unsecured network services and privilege escalation through unauthorized system modifications. Additionally, organizations should conduct comprehensive vulnerability assessments of their industrial control systems, implement regular firmware updates, and establish robust network monitoring to detect unauthorized access attempts to critical control systems. The remediation process should include disabling unnecessary network services, implementing strong access controls, and establishing proper network architecture that follows industrial cybersecurity best practices to prevent similar vulnerabilities from occurring in other components of the industrial control infrastructure.