{"cve":"CVE-2023-5915","nvd":{"published":"2023-12-01T07:15:12.627","modified":"2026-06-17T06:49:39.080","status":"Modified","description":"A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet, the maintenance homepage of the controller could not be accessed. Therefore, functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller’s operation is not stopped by the condition.\n\nThe affected products and versions are as follows: STARDOM FCN/FCJ R1.01 to R4.31.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":5.3},"cwes":["CWE-400"],"references":["https://jvn.jp/vu/JVNVU95177889/index.html","https://web-material3.yokogawa.com/1/35463/files/YSAR-23-0003-E.pdf","https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-02","https://jvn.jp/vu/JVNVU95177889/index.html","https://web-material3.yokogawa.com/1/35463/files/YSAR-23-0003-E.pdf"],"products":["yokogawa:stardom_fcj_firmware","yokogawa:stardom_fcn_firmware"],"source":"nvd","synced_at":"2026-10-19T21:42:07.670898610+00:00"},"epss":{"cve":"CVE-2023-5915","score":0.01166,"percentile":0.6733,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}