Description
A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a password set by default, an attacker can break into the affected product.
The affected products and versions are as follows:
FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
CI Server R1.01.00 to R1.03.00
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yokogawa Electric | FAST/TOOLS | R9.01 – ≤ R10.04 | — |
| Yokogawa Electric | CI Server | R1.01.00 – ≤ R1.03.00 | — |
Advisories 1
- ICSA-24-179-03 Yokogawa FAST/TOOLS and CI Server CISA ICS & IT advisories · Jun 27, 2024