Sauter: Multiple vulnerabilities in SAUTER modulo 6
Vulnerabilities have been discovered in the embedded firmware of SAUTER modulo 6 devices. These vulnerabilities affect the embedded web server as well as the interface to the SAUTER CASE Suite tools.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41724US | — | — | ||
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is nec… | ||||
| CVE-2025-41723US | — | — | ||
The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations. | ||||
| CVE-2025-41722US | —OT erhöht | — | ||
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affect… | ||||
| CVE-2025-41721US | — | — | ||
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected sel… | ||||
| CVE-2025-41720US | — | — | ||
A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified. | ||||
| CVE-2025-41719US | — | — | ||
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously con… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Mitigation
Protect access to device and network according to best practices and state of the art means
- Behoben
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
- Behoben
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
- Behoben
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
- Behoben
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
- Behoben
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
- Behoben
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan