Yokogawa FAST/TOOLS Weak Cryptography Vulnerability Allowing Decryption of Web Server Communications

A vulnerability in Yokogawa Electric Corporation's FAST/TOOLS product has been identified, which allows for the decryption of communications with the web server. This issue arises from the support of weak cryptographic algorithms. The vulnerability affects FAST/TOOLS versions R9.01 through R10.04, specifically within the following packages: RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB.

Impact

Exploitation of this vulnerability could lead to unauthorized decryption of communications between the web server and the client, potentially allowing attackers to intercept and read sensitive information.