VULNERABILITY INTELLIGENCE

CVE-2025-66596

CVSS score6.9 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-02-09
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an attacker inserts an invalid host header, users could be redirected to malicious sites. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Weakness classification

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references