CVE-2025-66603

CRITICAL

FAST/TOOLS <10.04 - Info Disclosure

Title source: llm
STIX 2.1

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Scores

CVSS v3 9.8
EPSS 0.0007
EPSS Percentile 21.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-358
Status published
Products (1)
yokogawa/fast\/tools r9.01 - r10.04
Published Feb 09, 2026
Tracked Since Feb 18, 2026