Authentication Bypass in FA-50 Configuration Settings

Executive Summary

CVE-2026-67578 is an authentication bypass vulnerability in the FURUNO FA-50 CLASS B AIS TRANSPONDER. The device fails to require authentication for some configuration changes on its management screen. An attacker with access to the vessel's internal network can exploit this to alter settings like the device's identification number without proper credentials.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking for unauthorized access to the FA-50 AIS transponder's management screen. Monitor network traffic for unusual connections to the device's IP address. Inspect device logs for unexpected configuration changes. Since the product is no longer supported, manual inspection of the settings screen for altered parameters like identification numbers is necessary.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthorized modification of the FA-50's settings, potentially altering its identification number and other critical parameters. This could lead to misidentification of the vessel, interference with AIS communications, or other unintended behaviors affecting navigation safety.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to a maritime navigation device (FA-50 AIS Transponder) rather than data handling systems. However, unauthorized configuration changes could indirectly impact safety and operational integrity, which may influence compliance with maritime regulations like SOLAS or ISPS Code.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict physical and network access to the FA-50 device. Avoid connecting it directly to the internet. Upgrade to the successor model FA-70 if possible. If upgrading is not feasible, ensure the vessel is properly secured and only authorized personnel can access the device.

Useful 0 Not Useful 0