Skip to main content

Fast Tools CVE-2025-66605

MEDIUM
Exposure of Private Personal Information to an Unauthorized Actor (CWE-359)
2026-02-09 7168b535-132a-4efe-a076-338f829b2eb9
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Feb 09, 2026 - 04:15 nvd
MEDIUM 5.3

DescriptionCVE.org

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

AnalysisAI

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using. [CVSS 5.3 MEDIUM]

Technical ContextAI

Affects Fast\/Tools. A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

CVE-2025-66603 CRITICAL
9.8 Feb 09

Yokogawa FAST/TOOLS has a second web server vulnerability involving improper cryptographic handling that weakens the sec

CVE-2025-66602 CRITICAL
9.8 Feb 09

Yokogawa FAST/TOOLS SCADA has a vulnerability in its web server component enabling unauthorized access to the industrial

CVE-2025-66606 CRITICAL
9.6 Feb 09

Yokogawa FAST/TOOLS has a third vulnerability involving improper encoding of output that could enable injection attacks

CVE-2026-11833 HIGH
8.2 Jun 23

Information disclosure in Yokogawa FAST/TOOLS (R9.01-R10.04) and CI Server (R1.01-R1.04) allows unmodified network attac

CVE-2025-66608 HIGH
7.5 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly v

CVE-2025-66597 HIGH
7.5 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak crypt

CVE-2025-66598 HIGH
7.5 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TL

CVE-2025-66601 MEDIUM
6.1 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MI

CVE-2025-66595 MEDIUM
5.4 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cr

CVE-2025-66594 MEDIUM
5.3 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed

CVE-2025-66607 MEDIUM
5.3 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an

CVE-2025-66604 MEDIUM
5.3 Feb 09

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be dis

Share

CVE-2025-66605 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy