CVE-2025-66595

Опубликовано: 09 фев. 2026

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link crafted by an attacker, the user’s account could be compromised.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Ссылки

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yokogawa:fast\/tools:*:*:*:*:*:*:*:*

Версия от r9.01 (включая) до r10.04 (включая)

EPSS

Процентиль: 1%

0.00095

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-mggh-hv8j-r56r

CVSS3: 5.4

github

6 месяцев назад

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link crafted by an attacker, the user’s account could be compromised. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

BDU:2026-01901

CVSS3: 5.3

fstec