TI-2025-41004 Aliases CVE-2025-66600 GHSA-8582-9v9f-8xjx

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

MEDIUM 44CWE-358Published 2026-02-09 · Updated 2026-02-09

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: High · Low · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00366 30th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Yokogawa Electric Corporation	FAST/TOOLS	R9.01 – R10.04	—	No fix listed	CNA

FAST/TOOLS VendorYokogawa Electric Corporation Affected R9.01 – R10.04 Fixed in — No fix listed CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:yokogawa:fast\/tools::::::::	—	—	Yokogawa Electric Corporation

cpe:2.3:a:yokogawa:fast\/tools:*:*:*:*:*:*:*:* Versions — — ·Yokogawa Electric Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-66600
2026-10-03 Alias added: GHSA-8582-9v9f-8xjx

References

Other 1

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf

TI-2014-00729 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0CRITICAL 9.0
TI-2014-03162 Stack-based buffer overflow in BKFSim_vhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000… CVSS 2.0HIGH 8.3
TI-2014-00728 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
TI-2014-00730 Yokogawa CENTUM CS 3000 Stack-based Buffer Overflow CVSS 2.0HIGH 8.3
TI-2014-00727 Yokogawa CENTUM CS 3000 Heap-based Buffer Overflow CVSS 2.0CRITICAL 9.3
TI-2014-04257 BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50… CVSS 2.0HIGH 7.5

See all 71 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences