A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Se ha encontrado una vulnerabilidad en FAST/TOOLS proporcionado por Yokogawa Electric Corporation. La versión de la biblioteca podría mostrarse en la página web. Esta información podría ser explotada por un atacante para otros ataques. Los productos y versiones afectados son los siguientes: FAST/TOOLS (Paquetes: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 a R10.04
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | NONE |
| Availability Impact | NONE |
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | HIGH |
| Attack Requirements | PRESENT |
| Privileges Required | NONE |
| User Interaction | ACTIVE |
| Vulnerability Confidentiality | LOW |
| Vulnerability Integrity | NONE |
| Vulnerability Availability | NONE |
| Subsequent Confidentiality | NONE |
| Subsequent Integrity | NONE |
| Subsequent Availability | NONE |
Source: 7168b535-132a-4efe-a076-338f829b2eb9
Type: Secondary
| Source | Type | Description |
|---|---|---|
| 7168b535-132a-4efe-a076-338f829b2eb9 | Secondary |
en
CWE-319
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| yokogawa | fast\/tools | * | <built-in method update of dict object at 0x7e6111c1cd00> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:yokogawa:fast\/tools:*:*:*:*:*:*:*:* |