Our takeCISA reports that the FURUNO FA-50 Class B AIS Transponder is affected by vulnerabilities that let an attacker change device settings; it is confirmed exploited in the wild. Patch it now if you run these units.Cyber Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:CISA reports that all versions of the FURUNO FA-50 Class B AIS Transponder contain vulnerabilities that allow an attacker to alter device settings. If you operate these units in maritime or critical infrastructure environments, treat this as confirmed active exploitation and apply any available mitigations or firmware updates immediately.
What this means for you — Lean IT orgs:If your organization uses a FURUNO FA-50 AIS transponder on vessels or for tracking, an attacker could change its settings. Check with the vessel operator or supplier right away for updates or temporary workarounds.
What this means for you — MSP:All versions of the FURUNO FA-50 Class B AIS Transponder are affected by vulnerabilities CISA lists as actively exploited. Review maritime and OT client inventories for these units and prioritize firmware updates or network isolation where possible.
What this means for you — Researcher:CISA advisory ICSA-26-237-07 confirms active exploitation in all versions of the FURUNO FA-50 Class B AIS Transponder, allowing remote alteration of device settings.