Описание
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server.
The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
Дефекты
Связанные уязвимости
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Уязвимость SCADA-системы Yokogawa FAST/TOOLS, связанная с некорректной проверкой безопасности для стандартных элементов, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
7.5 High
CVSS3