Threats Tagged 'cve-2025-66602'

CVE-2025-66602 is a medium-severity vulnerability in Yokogawa Electric Corporation's FAST/TOOLS SCADA system versions R9.01 to R10.04. The flaw arises because the web server accepts access by IP address without sufficient authentication, enabling potential unauthorized access. This weakness could be exploited by a worm that randomly scans IP addresses to intrude into networks running the affected FAST/TOOLS packages (RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB). The vulnerability does not require user interaction or privileges and can be exploited remotely over the network, potentially compromising confidentiality. No known exploits are currently in the wild, and no patches have been published yet. European organizations using FAST/TOOLS in critical infrastructure sectors such as energy, manufacturing, or utilities may face increased risk, especially in countries with significant Yokogawa deployments. Mitigation should focus on network segmentation, restricting IP-based access, and monitoring for anomalous scanning activity. Given the critical role of FAST/TOOLS in industrial control, exploitation could disrupt operations or leak sensitive data, warranting proactive defense measures.

MediumVulnerabilityGermanyFranceItaly+7#cve#cve-2025-66602#cwe-291