CVE-2025-66606

CRITICAL

9.6

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVE Details

CVSS v3.1 Score9.6

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published2/9/2026

Last Modified3/5/2026

Sourcenvd

Honeypot Sightings0

Affected Products

yokogawa:fast\/tools

Weaknesses (CWE)

CWE-86

References

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf(7168b535-132a-4efe-a076-338f829b2eb9)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.