Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Yokogawa FAST/TOOLS Displays Sensitive Path Information

CVE-2025-66599 · published 8 months ago
Summary

Some versions of Yokogawa's FAST/TOOLS software display internal file paths on web pages, potentially allowing an attacker to use this information for malicious purposes. This affects specific FAST/TOOLS packages and versions, including RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB from R9.01 to R10.04. To protect your system, update to the latest version or apply the recommended patch.

Original advisory text
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Physical paths could be displayed on web pages. This information could be exploited by an attacker for oth...
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.



Physical paths could
be displayed on web pages. This information could be exploited by an attacker
for other attacks.



The
affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to
R10.04
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere
Timeline
Published9 Feb 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-66599 · NVD
Track software like this
Free during beta