VDE-2026-093

csafCHsauter_psirt

SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mechanism allowing remote code execution

view advisory published 2026-09-01

A vulnerability has been found in the firmware update process of SAUTER Building Controllers. The identified vulnerability could allow unauthorized code execution on affected controllers.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-78319US——
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could exploit this race condit…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • Mitigation

    Protect access to device and network according to best practices and state of the art means.

  • FixedEY-modulo 5 embedded software version <7.0.0 installed on EY-modulo 5 ecos504

    Update EY-modulo 5 affected products with Firmware Version 7.0.0 or higher and enable the downgrade protection.

  • FixedEY-modulo 5 embedded software version <7.0.0 installed on EY-modulo 5 ecos505

    Update EY-modulo 5 affected products with Firmware Version 7.0.0 or higher and enable the downgrade protection.

  • Fixedmodulo 6 embedded software version <4.0.0 installed on modulo 6 modu612-LC

    Update modulo 6 affected products with Firmware Version 4.0.0 or higher and enable the downgrade protection.

  • Fixedmodulo 6 embedded software version <4.0.0 installed on modulo 6 modu660-AS

    Update modulo 6 affected products with Firmware Version 4.0.0 or higher and enable the downgrade protection.

  • Fixedmodulo 6 embedded software version <4.0.0 installed on modulo 6 modu680-AS

    Update modulo 6 affected products with Firmware Version 4.0.0 or higher and enable the downgrade protection.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan