Sauter: Multiple vulnerabilities in SAUTER modulo 6
Vulnerabilities have been discovered in the embedded firmware of SAUTER modulo 6 devices. These vulnerabilities affect the embedded web server as well as the interface to the SAUTER CASE Suite tools.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41724US | — | — | ||
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is nec… | ||||
| CVE-2025-41723US | — | — | ||
The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations. | ||||
| CVE-2025-41722US | —OT elevated | — | ||
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affect… | ||||
| CVE-2025-41721US | — | — | ||
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected sel… | ||||
| CVE-2025-41720US | — | — | ||
A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified. | ||||
| CVE-2025-41719US | — | — | ||
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously con… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Fixed
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
- Fixed
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
- Fixed
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
- Fixed
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
- Fixed
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
- Fixed
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan