FAST CVE-2025-66600

Improperly Implemented Security Check for Standard (CWE-358)

2026-02-09 7168b535-132a-4efe-a076-338f829b2eb9

Information Disclosure

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 09, 2026 - 04:15 nvd

N/A

DescriptionCVE.org

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

AnalysisAI

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Security) configuration.

Technical ContextAI

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04