« Volver al listado

CVE-2024-4106

Estado: AplazadaMedia (5.3)—

A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a password set by default, an attacker can break into the affected product. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04 CI Server R1.01.00 to R1.03.00

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Fast — ToolsAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-4106",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-4106",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-26T13:07:16.655100Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "7168b535-132a-4efe-a076-338f829b2eb9",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "7168b535-132a-4efe-a076-338f829b2eb9",
      "affectedData": [
        {
          "vendor": "Yokogawa Electric Corporation",
          "product": "FAST/TOOLS",
          "versions": [
            {
              "status": "affected",
              "version": "R9.01",
              "versionType": "custom",
              "lessThanOrEqual": "R10.04"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Yokogawa Electric Corporation",
          "product": "CI Server",
          "versions": [
            {
              "status": "affected",
              "version": "R1.01.00",
              "versionType": "custom",
              "lessThanOrEqual": "R1.03.00"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:yokogawa_electric_corporation:fast_tools:r901:*:*:*:*:*:*:*"
          ],
          "vendor": "yokogawa_electric_corporation",
          "product": "fast_tools",
          "versions": [
            {
              "status": "affected",
              "version": "r901",
              "versionType": "custom",
              "lessThanOrEqual": "R10.04"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:yokogawa_electric_corporation:ci_server:r1.01.00:*:*:*:*:*:*:*"
          ],
          "vendor": "yokogawa_electric_corporation",
          "product": "ci_server",
          "versions": [
            {
              "status": "affected",
              "version": "r1.01.00",
              "versionType": "custom",
              "lessThanOrEqual": "R1.03.00"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-26T06:15:15.830",
  "references": [
    {
      "url": "https://web-material3.yokogawa.com/1/36059/files/YSAR-24-0001-E.pdf",
      "source": "7168b535-132a-4efe-a076-338f829b2eb9"
    },
    {
      "url": "https://web-material3.yokogawa.com/1/36059/files/YSAR-24-0001-E.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "7168b535-132a-4efe-a076-338f829b2eb9",
      "description": [
        {
          "lang": "en",
          "value": "CWE-258"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been found in FAST/TOOLS and CI Server. The affected products have built-in accounts with no passwords set. Therefore, if the product is operated without a password set by default, an attacker can break into the affected product.\nThe affected products and versions are as follows:\nFAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04\nCI Server R1.01.00 to R1.03.00"
    },
    {
      "lang": "es",
      "value": "Se ha encontrado una vulnerabilidad en FAST/TOOLS y CI Server. Los productos afectados tienen cuentas integradas sin contraseñas establecidas. Por lo tanto, si el producto se utiliza sin una contraseña predeterminada, un atacante puede acceder al producto afectado. Los productos y versiones afectados son los siguientes: FAST/TOOLS (Paquetes: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 a R10.04 CI Server R1.01.00 a R1.03.00"
    }
  ],
  "lastModified": "2026-06-17T08:01:08.890",
  "sourceIdentifier": "7168b535-132a-4efe-a076-338f829b2eb9"
}