Skip to content
Fencer Intel
critical 9.8

CVE-2025-1863 json

Insecure default settings for recorder products

published last yr. modified 4mo ago also EUVD-2025-11854

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 55%
public exploits
0
none known

Summary

Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default settings, anyone can access all functions related to settings and operations. As a result, an attacker can illegally manipulate and configure important data such as measured values and settings. This issue affects GX10 / GX20 / GP10 / GP20 Paperless Recorders: R5.04.01 or earlier; GM Data Acquisition System: R5.05.01 or earlier; DX1000 / DX2000 / DX1000N Paperless Recorders: R4.21 or earlier; FX1000 Paperless Recorders: R1.31 or earlier; μR10000 / μR20000 Chart Recorders: R1.51 or earlier; MW100 Data Acquisition Units: All versions; DX1000T / DX2000T Paperless Recorders: All versions; CX1000 / CX2000 Paperless Recorders: All versions.

Is CVE-2025-1863 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-107-04 updated cvss 9.8

Yokogawa Recorder Products

  • Yokogawa CX1000 / CX2000 Paperless Recorders Yokogawa DX1000 / DX2000 / DX1000N Paperless Recorders <= R4.21 Yokogawa DX1000T / DX2000T Paperless Recorders Yokogawa FX1000 Paperless Recorders <= R1.31 Yokogawa GM Data Acquisition System <= R5.05.01 Yokogawa GX10 / GX20 / GP10 / GP20 Paperless Recorders <= R5.04.01
    +2 more products
    Yokogawa MW100 Data Acquisition Units Yokogawa μR10000 / μR20000 Chart Recorders <= R1.51
    affected: mitigation “Yokogawa has provided the following countermeasures for this vulnerability:” contact.yokogawa.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
last yr.

Exploit prediction

0.77% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Yokogawa Electric Corporation GX10 / GX20 / GP10 / GP20 Paperless Recorders
  • Yokogawa Electric Corporation GM Data Acquisition System
  • Yokogawa Electric Corporation DX1000 / DX2000 / DX1000N Paperless Recorders
  • Yokogawa Electric Corporation FX1000 Paperless Recorders
  • Yokogawa Electric Corporation μR10000 / μR20000 Chart Recorders
  • Yokogawa Electric Corporation MW100 Data Acquisition Units
  • Yokogawa Electric Corporation DX1000T / DX2000T Paperless Recorders
  • Yokogawa Electric Corporation CX1000 / CX2000 Paperless Recorders

Classification

Weakness
  • CWE-1188 Initialization of a Resource with an Insecure Default

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.