Yokogawa FAST/TOOLS and CI Server
Successful exploitation of these vulnerabilities could allow an attacker to launch a malicious script and take control of affected products.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-4106US | — | — | ||
A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a pass… | ||||
| CVE-2024-4105US | — | — | ||
A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process HTTP requests has a security flaw (Reflected XSS) that allow… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-179-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-179-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (14)
- MitigationCI Server
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationCI Server
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS FTEES Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS FTEES Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIMOB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIMOB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIWEB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS HMIWEB Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS RVSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS RVSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS UNSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- MitigationFAST/TOOLS UNSVRN Package
For both platforms, if the password for the default account has not been changed, please change that password according to the documentation included with the patch software.
- BehobenCI Server
Yokogawa recommends customers using Collaborative Information Server (CI Server) to update to R1.03.00 and apply patch software R10.04 SP3.
- BehobenCI Server
Yokogawa recommends customers using Collaborative Information Server (CI Server) to update to R1.03.00 and apply patch software R10.04 SP3.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan