Old SSL/TLS Vulnerability in FAST/TOOLS by Yokogawa Electric Corporation
CVE-2025-66598

7.1HIGH

Key Information:

Vendor

Yokogawa Electric Corporation

Status
Fast/tools
Vendor
CVE Published:
9 February 2026

What is CVE-2025-66598?

A significant security vulnerability has been identified in the FAST/TOOLS software suite provided by Yokogawa Electric Corporation. This issue arises from the software's support for outdated SSL/TLS protocols, which may allow malicious actors to intercept and decrypt sensitive communications exchanged with the web server. The affected versions, R9.01 to R10.04, including the associated packages RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB, require immediate attention to mitigate potential risks to data confidentiality and integrity.

Affected Version(s)

FAST/TOOLS R9.01

References

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.