Описание
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts.
The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
9.6 Critical
CVSS3
Дефекты
Связанные уязвимости
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Уязвимость SCADA-системы Yokogawa FAST/TOOLS, связанная с непринятием мер по нейтрализации недопустимых символов в идентификаторах на веб-страницах, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
EPSS
9.6 Critical
CVSS3