Description (CNA)
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yokogawa Electric Corporation / FAST/TOOLS | affected R9.01 through R10.04 |
CWE
CWE-358
References
ADP enrichment
No English description supplied.
No references supplied.