Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8582-9v9f-8xjx

Опубликовано: 09 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.8

Описание

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

EPSS

Процентиль: 24%
0.00308
Низкий

8.8 High

CVSS4

Дефекты

CWE-358

Связанные уязвимости

nvd
6 месяцев назад

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVSS3: 8.2
fstec
6 месяцев назад

Уязвимость веб-сервера SCADA-системы FAST/TOOLS, позволяющая нарушителю выполнить атаку MITM

EPSS

Процентиль: 24%
0.00308
Низкий

8.8 High

CVSS4

Дефекты

CWE-358