SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mechanism allowing remote code execution
A vulnerability has been found in the firmware update process of SAUTER Building Controllers. The identified vulnerability could allow unauthorized code execution on affected controllers.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-78319US | — | — | ||
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.
An unauthenticated remote attacker could exploit this race condit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CERT@VDE Security Advisories for Sauterexternal
- VDE-2026-093: SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mechanism allowing remote code execution - HTMLself
- VDE-2026-093: SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mechanism allowing remote code execution - CSAFself
- Cyberdefence Campus Domotics Hackathon 2026external
- Sauter Cybersecurityexternal
Behebungen (6)
- Mitigation
Protect access to device and network according to best practices and state of the art means.
- BehobenEY-modulo 5 embedded software version <7.0.0 installed on EY-modulo 5 ecos504
Update EY-modulo 5 affected products with Firmware Version 7.0.0 or higher and enable the downgrade protection.
- BehobenEY-modulo 5 embedded software version <7.0.0 installed on EY-modulo 5 ecos505
Update EY-modulo 5 affected products with Firmware Version 7.0.0 or higher and enable the downgrade protection.
- Behobenmodulo 6 embedded software version <4.0.0 installed on modulo 6 modu612-LC
Update modulo 6 affected products with Firmware Version 4.0.0 or higher and enable the downgrade protection.
- Behobenmodulo 6 embedded software version <4.0.0 installed on modulo 6 modu660-AS
Update modulo 6 affected products with Firmware Version 4.0.0 or higher and enable the downgrade protection.
- Behobenmodulo 6 embedded software version <4.0.0 installed on modulo 6 modu680-AS
Update modulo 6 affected products with Firmware Version 4.0.0 or higher and enable the downgrade protection.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan