Yokogawa FAST/TOOLS XML External Entity
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-7251US | low3.2 | — | ||
XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or ne… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-343-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-343-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (1)
- MitigationFAST/TOOLS
Older systems, using earlier revisions (R9.01 – R9.04) than the target revision (R9.05), should upgrade to the target revision (R9.05) and then apply the service pack. Contact Yokogawa support and services if it is difficult to upgrade the system to the target revision (R9.05). In addition, the vulnerability will be corrected and upgraded to the latest version (R10.01) of FAST/TOOLS.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan