Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default settings, anyone can access all functions related to settings and operations. As a result, an attacker can illegally manipulate and configure important data such as measured values and settings.
This issue affects GX10 / GX20 / GP10 / GP20 Paperless Recorders: R5.04.01 or earlier; GM Data Acquisition System: R5.05.01 or earlier; DX1000 / DX2000 / DX1000N Paperless Recorders: R4.21 or earlier; FX1000 Paperless Recorders: R1.31 or earlier; μR10000 / μR20000 Chart Recorders: R1.51 or earlier; MW100 Data Acquisition Units: All versions; DX1000T / DX2000T Paperless Recorders: All versions; CX1000 / CX2000 Paperless Recorders: All versions.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
GX10 / GX20 / GP10 / GP20 Paperless Recorders
Vendor
Yokogawa Electric Corporation
Product
GX10 / GX20 / GP10 / GP20 Paperless Recorders
Platforms
Unknown
Default status
unknown
GX10 / GX20 / GP10 / GP20 Paperless Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
R5.04.01 or earlier
affected
custom
Unavailable
Unavailable
None listed
GM Data Acquisition System
Vendor
Yokogawa Electric Corporation
Product
GM Data Acquisition System
Platforms
Unknown
Default status
unknown
GM Data Acquisition System · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
R5.05.01 or earlier
affected
custom
Unavailable
Unavailable
None listed
DX1000 / DX2000 / DX1000N Paperless Recorders
Vendor
Yokogawa Electric Corporation
Product
DX1000 / DX2000 / DX1000N Paperless Recorders
Platforms
Unknown
Default status
unknown
DX1000 / DX2000 / DX1000N Paperless Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
R4.21 or earlier
affected
custom
Unavailable
Unavailable
None listed
FX1000 Paperless Recorders
Vendor
Yokogawa Electric Corporation
Product
FX1000 Paperless Recorders
Platforms
Unknown
Default status
unknown
FX1000 Paperless Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
R1.31 or earlier
affected
custom
Unavailable
Unavailable
None listed
μR10000 / μR20000 Chart Recorders
Vendor
Yokogawa Electric Corporation
Product
μR10000 / μR20000 Chart Recorders
Platforms
Unknown
Default status
unknown
μR10000 / μR20000 Chart Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
R1.51 or earlier
affected
custom
Unavailable
Unavailable
None listed
MW100 Data Acquisition Units
Vendor
Yokogawa Electric Corporation
Product
MW100 Data Acquisition Units
Platforms
Unknown
Default status
unknown
MW100 Data Acquisition Units · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
Unavailable
Unavailable
None listed
DX1000T / DX2000T Paperless Recorders
Vendor
Yokogawa Electric Corporation
Product
DX1000T / DX2000T Paperless Recorders
Platforms
Unknown
Default status
unknown
DX1000T / DX2000T Paperless Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
custom
Unavailable
Unavailable
None listed
CX1000 / CX2000 Paperless Recorders
Vendor
Yokogawa Electric Corporation
Product
CX1000 / CX2000 Paperless Recorders
Platforms
Unknown
Default status
unknown
CX1000 / CX2000 Paperless Recorders · Scoped product and version facts