CVE-2025-41719

highpriority · track · 0EPSS 0.005 · 46 %ileCHEU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.55% (46th) EPSS

CVSS 8.8 · high

Is it mine?

15 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · sauter_psirt

EPSS · scored 2026-10-27

A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the default Administrator with a known default password.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedsauter_psirt
Install modulo 6 embedded software version 3.2.0 on modulo 6 devices
Mitigationsauter_psirt
Protect access to device and network according to best practices and state of the art means

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comexploitability 2.8 · impact 5.9

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Sauter PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1286USCWE-1286US

affected products (15)

Products and version ranges known to be affected.

SAUTER EY-modulo 5 ecos 5 ecos504/5050.0 → Firmware v6.0enisa_euvdEU
SAUTER EY-modulo 5 modu 5 modu5240.0 → Firmware v6.0enisa_euvdEU
SAUTER EY-modulo 5 modu 5 modu5250.0 → Firmware v6.0enisa_euvdEU
SAUTER modulo 6 devices modu612-LC0.0.0 → Firmware v3.2.0enisa_euvdEU
SAUTER modulo 6 devices modu660-AS0.0.0 → Firmware v3.2.0enisa_euvdEU
SAUTER modulo 6 devices modu680-AS0.0.0 → Firmware v3.2.0enisa_euvdEU
Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu612-LCall versionssauter_psirtCH
Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu660-ASall versionssauter_psirtCH
Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu680-ASall versionssauter_psirtCH
Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu612-LC installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH
Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu660-AS installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH
Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu680-AS installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH
Fr. SAUTER AG ecos504/505all versionsnot affectedsauter_psirtCH
Fr. SAUTER AG modu524all versionsnot affectedsauter_psirtCH
Fr. SAUTER AG modu525all versionsnot affectedsauter_psirtCH

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2025-060Sauter: Multiple vulnerabilities in SAUTER modulo 6 2025-10-21csaf · sauter_psirtCH
Vulnerabilities have been discovered in the embedded firmware of SAUTER modulo 6 devices. These vulnerabilities affect the embedded web server as well as the interface to the SAUTER CASE Suite tools.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd sauter_psirt NVD CVE.org MITRE

published 2025-10-22modified 2026-10-18

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan