Paper/Archive/CVE-2025-66606

CVE-2025-66606

Yokogawa Electric Corporation FAST/TOOLS — A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

EPSS 0.3%CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (NVD)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 17.6.176 × 203.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Affected

ProductAffectedFixed inSource

FAST/TOOLSR9.01 – R10.04–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

YokogawaGroup (CNA)2.1CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refweb-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf