Unscored severity · published Dec 6, 2014
CVE-2014-7251
XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or…
–
CVSS
0.3%
EPSS
No
On KEV
Description
XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service (CPU or network traffic consumption) or read arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Fast/tools · Yokogawa
r9.01; r9.02; r9.03; r9.04; r9.05 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7251
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7251
jvn.jp
http://jvn.jp/en/jp/JVN54775800/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000141.html
Vendor Advisory
http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0004E.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/99018
More from Fast/tools
9.8
CVE-2025-66602
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation
9.8
CVE-2025-66603
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation
9.6
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation
7.5
CVE-2025-66597
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation
7.5
CVE-2025-66598
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation