CNNVD-202602-1391 Information

CNNVD ID

CNNVD-202602-1391

CVE-2025-66600

  • CNNVD Published: 2026-02-09

Description (Chinese)

Yokogawa FAST/TOOLS是日本横河电机(Yokogawa)公司的一个实时操作管理和可视化软件。 Yokogawa FAST/TOOLS R9.01版本至R10.04版本存在安全漏洞,该漏洞源于缺少HSTS配置,攻击者进行中间人攻击时可能嗅探与Web服务器的通信。

Description (English)

Yokogawa FAST/TOOLS is a real-time operational management and visualization software of Yokogawa. Yokogawa FAST/TOOLS R9.01 to R10.04 had a security loophole, which stemmed from the lack of a HSTS configuration, and could smell communications with the Web server when the attackers carried out an attack by an intermediary.

Vulnerability Type

其他

Affected Vendor

横河电机

Published

2026-02-09

Last Modified

2026-02-24

References

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf

Patch

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf

Share on: