Yokogawa FAST/TOOLS Error Message Disclosure Vulnerability

A vulnerability exists in Yokogawa FAST/TOOLS versions R9.01 to R10.04, across several packages including RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB. The issue arises from detailed error messages that are displayed on the error page, which could be exploited by an attacker to facilitate other types of attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of information, by allowing attackers to use the disclosed error details to conduct further attacks.

Remediation

Users are advised to upgrade to FAST/TOOLS R10.04 SP3 and apply the patch software CS_e12787. For assistance, contact your local Yokogawa supporting office.