FURUNO FA-50 Class B AIS Transponder
FURUNO FA-50 Class B AIS Transponder has critical vulnerabilities allowing device setting alteration.
Two critical vulnerabilities have been identified in the FURUNO FA-50 Class B AIS Transponder, affecting all versions. CVE-2026-59769 allows attackers with network access and credentials to alter device settings, while CVE-2026-67578 enables configuration changes without authentication. As production ceased in October 2020, no software updates will be provided, and users are advised to avoid direct internet connections and secure the vessel's network.
AI summary of the linked source. Not reviewed by an editor. How this works
Run FURUNO ELECTRIC CO.,LTD.?
Get an email when a new story names FURUNO ELECTRIC CO.,LTD., usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe FURUNO FA-50 AIS Transponder contains two critical vulnerabilities — one allowing authenticated users to alter device settings and another enabling configuration changes with no authentication at all. Because the product reached end-of-life in October 2020, no patches will ever be issued, leaving all deployed units permanently vulnerable. This is a textbook example of the risks posed by legacy, unsupported hardware in operational technology (OT) environments where safety and navigation are at stake. Attackers exploiting these flaws could manipulate AIS data, disrupt maritime situational awareness, or use the device as a pivot point into the vessel's broader network. The inability to patch underscores why lifecycle management and network isolation are critical compensating controls.
What helps against this
How we list vendors- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- Next-generation firewall and intrusion prevention
Malicious traffic is blocked at the network edge and between zones.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-59769
- cve — CVE-2026-67578