Vulnerability in FAST/TOOLS by Yokogawa Electric Corporation
CVE-2025-66600

8.8HIGH

Key Information:

Vendor

Yokogawa Electric Corporation

Status
Fast/tools
Vendor
CVE Published:
9 February 2026

What is CVE-2025-66600?

A security vulnerability exists in FAST/TOOLS provided by Yokogawa Electric Corporation due to the lack of HTTP Strict Transport Security (HSTS) configuration. This oversight enables potential attackers to exploit Man-in-the-Middle (MITM) attacks, where they can intercept and inspect communications between clients and the web server. Affected versions include FAST/TOOLS from R9.01 to R10.04 across multiple packages, raising concerns about the safety of sensitive data transmitted over the network.

Affected Version(s)

FAST/TOOLS R9.01

References

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-...

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.