ByteOS Network

NVD Vulnerability Details :

CVE-2025-66608

Awaiting Analysis

Source-7168b535-132a-4efe-a076-338f829b2eb9

Published At-09 Feb, 2026 | 04:15

Updated At-09 Feb, 2026 | 16:08

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	8.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 4.0

Base score: 8.7

Base severity: HIGH

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-29	Secondary	7168b535-132a-4efe-a076-338f829b2eb9

CWE ID: CWE-29

Type: Secondary

Source: 7168b535-132a-4efe-a076-338f829b2eb9

References

Hyperlink	Source	Resource
https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf	7168b535-132a-4efe-a076-338f829b2eb9	N/A

Hyperlink: https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf

Source: 7168b535-132a-4efe-a076-338f829b2eb9

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History