Vulnerabilidades do Yokogawa Fast/tools

CVE-2025-66598 Alta · 7.5 CWE-327 09/02/2026

Use of a Broken or Risky Cryptographic Algorithm em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66597 Alta · 7.5 CWE-327 09/02/2026

Use of a Broken or Risky Cryptographic Algorithm em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithms, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66596 Média · 6.1 CWE-601 09/02/2026

Open Redirect em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an attacker inserts an invalid host header, users could be redirected to malicious sites. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66595 Média · 5.4 CWE-352 09/02/2026

Cross-Site Request Forgery (CSRF) em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link crafted by an attacker, the user’s account could be compromised. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66594 Média · 5.3 CWE-209 09/02/2026

Information Exposure Through an Error Message em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66608 Alta · 7.5 CWE-29 09/02/2026

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation…

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66607 Média · 5.3 CWE-358 09/02/2026

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation…

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting. Users could be redirected to malicious sites by an attacker. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66606 Crítica · 9.6 CWE-86 09/02/2026

Yokogawa FAST/TOOLS: Codificação Inadequada de URLs (CWE-86)

Foi identificada uma vulnerabilidade no FAST/TOOLS fornecido pela Yokogawa Electric Corporation. Este produto não codifica adequadamente URLs. Um atacante poderia adulterar páginas web ou executar scripts maliciosos. Os produtos e versões afetados são: FAST/TOOLS (Pacotes: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 a R10.04

CVE-2025-66605 Média · 5.3 CWE-359 09/02/2026

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation…

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66604 Média · 5.3 CWE-319 09/02/2026

Cleartext Transmission of Sensitive Information em Yokogawa Fast/tools

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE-2025-66603 Crítica · 9.8 CWE-358 09/02/2026

Servidor web do Yokogawa FAST/TOOLS aceita método HTTP OPTIONS

Foi identificada uma vulnerabilidade no FAST/TOOLS fornecido pela Yokogawa Electric Corporation. O servidor web aceita o método OPTIONS. Um atacante poderia potencialmente usar essa informação para realizar outros ataques. Os produtos e versões afetados são os seguintes: FAST/TOOLS (Pacotes: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 a R10.04

CVE-2025-66602 Crítica · 9.8 CWE-291 09/02/2026

Falha de dependência de endereço IP no servidor web do Yokogawa FAST/TOOLS

Foi identificada uma vulnerabilidade no FAST/TOOLS fornecido pela Yokogawa Electric Corporation. O servidor web aceita acesso por endereço IP. Quando um worm que procura aleatoriamente endereços IP invade a rede, ele poderia potencialmente ser atacado pelo worm. Os produtos e versões afetados são os seguintes: FAST/TOOLS (Pacotes: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 a R10.04

CVE-2025-66601 Média · 6.1 CWE-358 09/02/2026

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation…

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04