Yokogawa FAST/TOOLS and CI Server

ADVISORY SUMMARY Successful exploitation of this vulnerability may return a response containing the CI Server setting information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

Yokogawa CENTUM VP SCADA Data Compromise

The vulnerability of the Yokogawa CENTUM VP SCADA system is related to the use of strictly encrypted accounting data. Exploiting this vulnerability could allow an intruder to compromise the confidentiality and integrity of the protected information...

Yokogawa CENTUM VP

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to login as the PROG user and modify permissions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

Yokogawa CENTUM VP security vulnerabilities

Yokogawa CENTUM VP is a distributed control system platform developed by Yokogawa Electric Corporation in Japan. There are security vulnerabilities in Yokogawa CENTUM VP, which stem from hardcoded passwords. This could allow attackers to log in as PROG users under certain conditions...

Yokogawa CENTUM VP R6, R7

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to terminate the software stack process, cause a denial-of-service condition, or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

SCADA System Web Server Yokogawa FAST/TOOLS Bypass

The vulnerability of the SCADA system’s web server, Yokogawa FAST/TOOLS, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions remotely...

SCADA System Yokogawa FAST/TOOLS Code Execution

The vulnerability of the Yokogawa FAST/TOOLS SCADA system’s web server is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the OPTIONS method from a remote location...

Yokogawa FAST/TOOLS SCADA Plaintext Disclosure Code Execution

The vulnerability of the Yokogawa FAST/TOOLS SCADA system lies in the transmission of critical information in plaintext. Exploiting this vulnerability allows a malicious actor to disclose the protected information and execute arbitrary codes...

Yokogawa FAST/TOOLS SCADA Data Compromise Disclosure

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to the violation of personal privacy. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

Yokogawa FAST/TOOLS SCADA XSS

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to the failure to take measures to eliminate unacceptable symbols in the identification fields of web pages. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

Yokogawa FAST/TOOLS SCADA Phishing

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks from a remote location...

Yokogawa FAST/TOOLS SCADA Disclosure Information

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through specially crafted queries...

Yokogawa FAST/TOOLS SCADA Code Execution

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

CVE-2025-48022

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

CVE-2025-48019

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

CVE-2025-1924

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions a...

CVE-2025-48023

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

CVE-2025-48023

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

CVE-2025-48021

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

CVE-2025-48023

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...