Default Password Vulnerability in FAST/TOOLS and CI Server by Yokogawa

CVE-2024-4106

What is CVE-2024-4106?

A vulnerability exists in Yokogawa's FAST/TOOLS and CI Server, where built-in accounts lack passwords by default. If these products are not secured with a custom password, attackers can gain unauthorized access, potentially compromising sensitive data and configuration settings. Users are advised to ensure that all default accounts are secured and protected with strong passwords to mitigate the risk of exploitation.

References