FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration

CSIRTS triage

What

The FA-50 Class B AIS Transponder contains hard-coded credentials and lacks authentication for additional configuration access.

Who is affected

All deployed FA-50 Class B AIS Transponder units.

Urgency

Moderate; exposed to unauthorized remote configuration without proof of active exploitation.

Action

Contact Furuno Electric for a firmware update that removes hard-coded credentials and enforces authentication.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

JVN (Japan Vulnerability Notes) (JP · national-cert · site)

Severity

unknown

Published

2026-08-26

Exploitation

Not in CISA KEV at last sync

Original advisory: https://jvn.jp/en/vu/JVNVU95422936/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-597690.33% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-675780.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• criticalFURUNO FA-50 Class B AIS Transpondercisa
• highCVE-2026-67578: FA-50 all versions miss authentication for some configuration. An attacker with access to the …nvd
• criticalCVE-2026-59769: FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and …nvd

More from JVN (Japan Vulnerability Notes)

• unknownAndroid App "Myna Point" vulnerable to improper access restriction2026-08-26
• unknownMultiple vulnerabilities in CorvusSKK2026-08-26
• unknownApache Struts 2 vulnerable to resource exhaustion2026-08-25
• unknownMultiple vulnerabilities in SKYSEA Client View and SKYMEC IT Manager2026-08-24
• unknownMultiple vulnerabilities in SKYSEA Client View2026-08-24