Paper/Archive/CVE-2025-66603

CVE-2025-66603

Yokogawa Electric Corporation FAST/TOOLS — A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 23.0.230 × 204.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Affected

ProductAffectedFixed inSource

FAST/TOOLSR9.01 – R10.04–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

YokogawaGroup (CNA)2.1CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refweb-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf