FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration

The FA-50 CLASS B AIS Transponder by FURUNO ELECTRIC CO., LTD. is affected by a security weakness where hard-coded credentials are embedded in the device, and additional configuration functions do not require authentication. This design flaw can lead to unauthorized access to the device's configuration interface.

Unauthorized actors could exploit the hard-coded credentials and missing authentication to gain access to the transponder's configuration, potentially altering its operation or causing disruption. The exact impact depends on the attacker's intent and the environment in which the device operates.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict physical and network access to the device to trusted personnel only.