Sauter PSIRT
organization01
references
Other names and identifiers for this entity.
sauter_psirtCH psirt@sautergroup.com
02
assessed vulnerabilities (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-78319US | — | — | ||
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.
An unauthenticated remote attacker could exploit this race condit… | ||||
| CVE-2025-41724US | — | — | ||
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is nec… | ||||
| CVE-2025-41723US | — | — | ||
The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations. | ||||
| CVE-2025-41722US | —OT elevated | — | ||
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affect… | ||||
| CVE-2025-41721US | — | — | ||
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected sel… | ||||
| CVE-2025-41720US | — | — | ||
A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified. | ||||
| CVE-2025-41719US | — | — | ||
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously con… | ||||