Yokogawa FAST/TOOLS and CI Server
Successful exploitation of these vulnerabilities could allow an attacker to launch a malicious script and take control of affected products.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-4106US | — | — | ||
A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a pass… | ||||
| CVE-2024-4105US | — | — | ||
A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process HTTP requests has a security flaw (Reflected XSS) that allow… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-179-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-179-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (14)
- MitigationCI Server
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationCI Server
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS FTEES Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS FTEES Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIMOB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIMOB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIWEB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIWEB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS RVSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS RVSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS UNSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS UNSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- FixedCI Server
Yokogawa recommends customers using Collaborative Information Server (CI Server) to update to R1.03.00 and apply patch software R10.04 SP3.
- FixedCI Server
Yokogawa recommends customers using Collaborative Information Server (CI Server) to update to R1.03.00 and apply patch software R10.04 SP3.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan