CVE-2025-66601

Summary

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Affected Software

VendorProductVersion RangeStatus
Yokogawa Electric CorporationFAST/TOOLSR9.01 <= R10.04affected

Weaknesses

  • CWE-358: CWE-358

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References