Sauter PSIRT (CSAF)
advisoryCHsauter_psirt
Sauter PSIRT CSAF 2.0 advisories (hosted by CERT@VDE).
01
advisories (2)
Vendor and ecosystem advisories describing this.
02
product assertions (15)
Products and version ranges known to be affected.
- EY-modulo 5 embedded software version <7.0.0 installed on EY-modulo 5 ecos504
- EY-modulo 5 embedded software version <7.0.0 installed on EY-modulo 5 ecos505
- Firmware EY-modulo 5 embedded software <v6.0 installed on EY-modulo 5 ecos 5 ecos504/505
- Firmware EY-modulo 5 embedded software <v6.0 installed on EY-modulo 5 modu 5 modu524
- Firmware EY-modulo 5 embedded software <v6.0 installed on EY-modulo 5 modu 5 modu525
- Firmware EY-modulo 5 embedded software v6.0 installed on EY-modulo 5 ecos 5 ecos504/505 installed with Software CASE Suite v5.2 SR5
- Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu612-LC
- Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu660-AS
- Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu680-AS
- Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu612-LC installed with Software CASE Suite v5.2 SR5
- Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu660-AS installed with Software CASE Suite v5.2 SR5
- Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu680-AS installed with Software CASE Suite v5.2 SR5
- modulo 6 embedded software version <4.0.0 installed on modulo 6 modu612-LC
- modulo 6 embedded software version <4.0.0 installed on modulo 6 modu660-AS
- modulo 6 embedded software version <4.0.0 installed on modulo 6 modu680-AS
03
CVE links (7)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-78319US | — | — | ||
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.
An unauthenticated remote attacker could exploit this race condit… | ||||
| CVE-2025-41724US | — | — | ||
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is nec… | ||||
| CVE-2025-41723US | — | — | ||
The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations. | ||||
| CVE-2025-41722US | —OT elevated | — | ||
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affect… | ||||
| CVE-2025-41721US | — | — | ||
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected sel… | ||||
| CVE-2025-41720US | — | — | ||
A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified. | ||||
| CVE-2025-41719US | — | — | ||
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously con… | ||||