CVE-2025-66595

MEDIUM
2026-02-09 7168b535-132a-4efe-a076-338f829b2eb9
5.4
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Feb 09, 2026 - 05:16 nvd
MEDIUM 5.4

Tags

CSRF

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link crafted by an attacker, the user’s account could be compromised. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Analysis

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). [CVSS 5.4 MEDIUM]

Technical Context

Classified as CWE-352 (Cross-Site Request Forgery (CSRF)). Affects Fast\/Tools. A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product is

vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link

crafted by an attacker, the user’s account could be compromised.

The

affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to

R10.04

Affected Products

Vendor: Yokogawa. Product: Fast\/Tools.

Remediation

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Priority Score

27
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +27
POC: 0

Share

CVE-2025-66595 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy