Yokogawa FAST/TOOLS and CI Server

ADVISORY SUMMARY Successful exploitation of this vulnerability may return a response containing the CI Server setting information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

CVE-2026-11833

Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages:...

CVE-2026-11833

Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages:...

CVE-2026-11833

Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages:...

CVE-2026-11833

CVE-2026-11833 affects FAST/TOOLS (RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) from R9.01 to R10.04 and CI Server (all packages) from R1.01 to R1.04. The web server may return a response containing CI Server setting information, which could be exploited by an attacker for other attacks. The CVSS4 scor...

EUVD-2026-38411

Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages:...

PT-2026-51470

Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04 CI Server versions R1.01 through R1.04 Description The web server may return a response containing CI Server setting information, which could be exploited by an attacker to facilitate further attacks...

The vulnerability of the SCADA system FAST/TOOLS, related to the disclosure of system data by unauthorized parties in the controlled area, allows a intruder to compromise the confidentiality of the protected information.

The vulnerability of the SCADA system FAST/TOOLS is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the SCADA system FAST/TOOLS, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of the SCADA system FAST/TOOLS is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability of the SCADA system’s web server FAST/TOOLS allows a perpetrator to carry out an MITM attack.

The vulnerability of the FAST/TOOLS SCADA system’s web server is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to carry out an MITM attack...

The vulnerability of the SCADA system’s web server FAST/TOOLS allows a intruder to disclose protected information.

The vulnerability of the FAST/TOOLS SCADA system’s web server is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the SCADA system FAST/TOOLS lies in the redirection of URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the SCADA system FAST/TOOLS is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

The vulnerability of the SCADA system’s web server FAST/TOOLS allows a intruder to disclose protected information.

The vulnerability of the FAST/TOOLS SCADA system’s web server is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the SCADA system FAST/TOOLS, related to deficiencies in the error reporting mechanism, allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the SCADA system FAST/TOOLS is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows a intruder to disclose protected information.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through specially crafted queries...

The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to improper security checks for standard elements, allows a intruder to execute arbitrary codes.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

The vulnerability of the SCADA system’s web server, Yokogawa FAST/TOOLS, allows a intruder to execute arbitrary code.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system’s web server is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the OPTIONS method from a remote location...

The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to the transmission of critical information in plaintext, allows a intruder to disclose protected information and execute arbitrary codes.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system lies in the transmission of critical information in plaintext. Exploiting this vulnerability allows a malicious actor to disclose the protected information and execute arbitrary codes...

The vulnerability of the Yokogawa FAST/TOOLS SCADA system, related to the violation of personal privacy, allows a intruder to disclose protected information.

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to the violation of personal privacy. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

CVE-2025-66603

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN,...