{"id":"CVE-2025-66605","state":"PUBLISHED","title":"A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.","description":"A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.\n\n\n\nSince there are input\nfields on this webpage with the autocomplete attribute enabled, the input\ncontent could be saved in the browser the user is using.\n\n\n\nThe\naffected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to\nR10.04","publishedAt":"2026-02-09T03:13:02.297Z","updatedAt":"2026-02-09T19:06:34.439Z","severity":{"score":2.1,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","source":"YokogawaGroup"},"assigner":"YokogawaGroup","products":["Yokogawa Electric Corporation FAST/TOOLS"],"affected":[{"vendor":"Yokogawa Electric Corporation","product":"FAST/TOOLS","defaultStatus":"unknown","versions":[{"version":"R9.01","status":"affected","lessThanOrEqual":"R10.04","versionType":"custom"}]}],"references":["https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf"],"weaknesses":["CWE-359"],"ingestedAt":"2026-10-29T20:09:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/66xxx/CVE-2025-66605.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-66605","state":"PUBLISHED","datePublished":"2026-02-09T03:13:02.297Z","dateUpdated":"2026-02-09T19:06:34.439Z","assignerShortName":"YokogawaGroup","assignerOrgId":"7168b535-132a-4efe-a076-338f829b2eb9","dateReserved":"2025-12-05T05:04:40.514Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.\n\n\n\nSince there are input\nfields on this webpage with the autocomplete attribute enabled, the input\ncontent could be saved in the browser the user is using.\n\n\n\nThe\naffected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to\nR10.04"}],"affected":[{"vendor":"Yokogawa Electric Corporation","product":"FAST/TOOLS","defaultStatus":"unknown","versions":[{"version":"R9.01","status":"affected","lessThanOrEqual":"R10.04","versionType":"custom"}]}],"references":[{"url":"https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":2.1,"baseSeverity":"LOW","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-359","description":"CWE-359","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"YokogawaGroup","orgId":"7168b535-132a-4efe-a076-338f829b2eb9","dateUpdated":"2026-02-09T03:13:02.297Z"},"datePublic":"2026-02-09T03:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-09T19:02:42.053005Z","id":"CVE-2025-66605","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-09T19:06:34.439Z"}}]}}}