Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mq2p-w6p2-6mrv

Опубликовано: 09 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

EPSS

Процентиль: 32%
0.00385
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-29

Связанные уязвимости

CVSS3: 7.5
nvd
6 месяцев назад

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVSS3: 7.5
fstec
6 месяцев назад

Уязвимость SCADA-системы Yokogawa FAST/TOOLS, связанная с некорректной проверкой безопасности для стандартных элементов, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 32%
0.00385
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-29