<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Yokogawa Group — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/yokogawagroup" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Yokogawa Group (yokogawagroup).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/yokogawagroup.png</url>
      <title>Yokogawa Group — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-11833 · 8.2 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-11833</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-11833</guid>
      <description>Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could be exploited by an attacker for other attacks. The affected products and v…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 23 Jun 2026 00:53:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-7741 · 2.1 LOW</title>
      <link>https://vulnogram.org/CVE-2025-7741</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-7741</guid>
      <description>Hardcoded Password Vulnerability have been found in CENTUM. Affected products contain a hardcoded password for the user account (PROG) used for CENTUM Authentication Mode within the system. Under the following conditions, there is a risk that an atta…</description>
      <category>Low</category>
      <pubDate>Mon, 30 Mar 2026 00:01:11 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-48023 · 6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-48023</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-48023</guid>
      <description>A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are…</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 05:00:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-48022 · 6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-48022</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-48022</guid>
      <description>A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are…</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 04:58:12 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-48021 · 6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-48021</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-48021</guid>
      <description>A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are…</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 04:56:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-48020 · 6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-48020</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-48020</guid>
      <description>A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are…</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 04:54:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-48019 · 6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-48019</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-48019</guid>
      <description>A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are…</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 04:51:46 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1924 · 6 MEDIUM</title>
      <link>https://vulnogram.org/CVE-2025-1924</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1924</guid>
      <description>A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be…</description>
      <category>Medium</category>
      <pubDate>Fri, 13 Feb 2026 04:46:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66594 · 6.9 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66594</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66594</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks. The affected products and versions are as…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:37:30 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66595 · 6.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66595</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66595</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product is vulnerable to Cross-Site Request Forgery (CSRF). When a user accesses a link crafted by an attacker, the user’s account could be compromised. The…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:36:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66596 · 6.9 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66596</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66596</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an attacker inserts an invalid host header, users could be redirected to malicious sites. The affect…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:35:28 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66597 · 8.8 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66597</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66597</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithms, potentially allowing an attacker to decrypt communications with the web server. The affected products and ver…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:31:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66598 · 7.1 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-66598</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66598</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server. The affected products and versions are…</description>
      <category>High</category>
      <pubDate>Mon, 09 Feb 2026 03:26:46 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66599 · 6.9 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66599</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66599</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Physical paths could be displayed on web pages. This information could be exploited by an attacker for other attacks. The affected products and versions are as fo…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:25:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66600 · 8.8 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66600</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66600</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web s…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:24:33 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66601 · 6.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66601</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66601</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed. The affected products and vers…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:17:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66602 · 6.9 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66602</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66602</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly searches for IP addresses intrudes into the network, it could potentially be attacked by th…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:16:47 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66603 · 2.1 LOW 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66603</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66603</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are a…</description>
      <category>Low</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:15:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66604 · 2.1 LOW 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66604</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66604</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks. The affected products and versions a…</description>
      <category>Low</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:14:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66605 · 2.1 LOW 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66605</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66605</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using. The affec…</description>
      <category>Low</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:13:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66608 · 8.7 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66608</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66608</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and vers…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:11:56 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66607 · 6.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66607</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66607</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting. Users could be redirected to malicious sites by an attacker. The affected products and versions are as follows:…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:09:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-66606 · 2.1 LOW 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-66606</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-66606</guid>
      <description>A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follow…</description>
      <category>Low</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Feb 2026 03:06:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1863 · 9.8 CRITICAL 🌩️ — Insecure default settings for recorder products</title>
      <link>https://vulnogram.org/CVE-2025-1863</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1863</guid>
      <description>Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default set…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 18 Apr 2025 05:55:26 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-8110 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-8110</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-8110</guid>
      <description>Denial of Service (DoS) vulnerability has been found in Dual-redundant Platform for Computer. If a computer on which the affected product is installed receives a large number of UDP broadcast packets in a short period, occasionally that computer may…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 17 Sep 2024 02:04:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-4106 · 5.3 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-4106</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-4106</guid>
      <description>A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a password set by default, an attacker can break into the affected product.…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jun 2024 05:30:33 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-4105 · 5.8 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2024-4105</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-4105</guid>
      <description>A vulnerability has been found in FAST/TOOLS and CI Server. The affected product&apos;s WEB HMI server&apos;s function to process HTTP requests has a security flaw (Reflected XSS) that allows the execution of malicious scripts. Therefore, if a client PC with i…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jun 2024 05:25:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-5650 · 8.5 HIGH</title>
      <link>https://vulnogram.org/CVE-2024-5650</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-5650</guid>
      <description>DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the D…</description>
      <category>High</category>
      <pubDate>Mon, 17 Jun 2024 06:21:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-5915</title>
      <link>https://vulnogram.org/CVE-2023-5915</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-5915</guid>
      <description>A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sendi…</description>
      <pubDate>Fri, 01 Dec 2023 06:12:03 GMT</pubDate>
    </item>
  </channel>
</rss>
