CVE-2024-4105
CVSS V2 None
CVSS V3 None
Description
A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process HTTP requests has a security flaw (Reflected XSS) that allows the execution of malicious scripts. Therefore, if a client PC with inadequate security measures accesses a product URL containing a malicious request, the malicious script may be executed on the client PC.
The affected products and versions are as follows:
FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
CI Server R1.01.00 to R1.03.00
Overview
- CVE ID
- CVE-2024-4105
- Assigner
- YokogawaGroup
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-06-26T05:25:04.524Z
- Last Modified Date
- 2024-06-26T05:25:04.524Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://web-material3.yokogawa.com/1/36059/files/YSAR-24-0001-E.pdf | vendor-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-4105 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4105 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 19:18:37 | Added to TrackCVE |