PT-2026-7050
CVE-2025-66602
·
Published
2026-02-09
·
Updated
2026-03-05
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FAST/TOOLS versions R9.01 through R10.04
Description
The web server component accepts access by IP address, potentially allowing exploitation by worms that randomly search for IP addresses. This could lead to unauthorized access if a worm intrudes into the network. The affected packages are RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB.
Recommendations
FAST/TOOLS versions R9.01 through R10.04 should be updated to a newer, secure version.
Found an issue in the description? Have something to add? Feel free to write us 👾