Yokogawa FAST/TOOLS Autocomplete Vulnerability in Web Input Fields

A vulnerability exists in Yokogawa FAST/TOOLS versions R9.01 to R10.04, across several packages including RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB. The issue arises from input fields on a webpage that have the autocomplete attribute enabled, allowing input content to be saved in the user's browser.

Impact

Exploitation of this vulnerability could lead to the unauthorized exposure of private personal information, as input data could be saved and potentially accessed by unauthorized actors.

Remediation

Users are advised to update to FAST/TOOLS R10.04 SP3 and apply the patch software CS_e12787. For assistance, contact your local Yokogawa supporting office.