CVE-2025-41722

highpriority · track · 0OT risk · elevatedEPSS 0.003 · 19 %ileCHEU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.27% (19th) EPSS

CVSS 7.5 · high

Is it mine?

16 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · sauter_psirt

EPSS · scored 2026-10-27

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedsauter_psirt
Install EY-modulo 5 embedded software v6.0 on supported EY-modulo 5 devices
Mitigationsauter_psirt
Protect access to device and network according to best practices and state of the art means

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · info@cert.vde.comexploitability 3.9 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Sauter PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-798USCWE-798US

affected products (16)

Products and version ranges known to be affected.

SAUTER EY-modulo 5 ecos 5 ecos504/5050.0 → Firmware v6.0enisa_euvdEU
SAUTER EY-modulo 5 modu 5 modu5240.0 → Firmware v6.0enisa_euvdEU
SAUTER EY-modulo 5 modu 5 modu5250.0 → Firmware v6.0enisa_euvdEU
SAUTER modulo 6 devices modu612-LC0.0.0 → Firmware v3.2.0enisa_euvdEU
SAUTER modulo 6 devices modu660-AS0.0.0 → Firmware v3.2.0enisa_euvdEU
SAUTER modulo 6 devices modu680-AS0.0.0 → Firmware v3.2.0enisa_euvdEU
Firmware EY-modulo 5 embedded software <v6.0 installed on EY-modulo 5 ecos 5 ecos504/505all versionssauter_psirtCH
Firmware EY-modulo 5 embedded software <v6.0 installed on EY-modulo 5 modu 5 modu524all versionssauter_psirtCH
Firmware EY-modulo 5 embedded software <v6.0 installed on EY-modulo 5 modu 5 modu525all versionssauter_psirtCH
Firmware EY-modulo 5 embedded software v6.0 installed on EY-modulo 5 ecos 5 ecos504/505 installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH
Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu612-LCall versionssauter_psirtCH
Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu660-ASall versionssauter_psirtCH
Firmware modulo 6 embedded software <v3.2.0 installed on modulo 6 devices modu680-ASall versionssauter_psirtCH
Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu612-LC installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH
Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu660-AS installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH
Firmware modulo 6 embedded software v3.2.0 installed on modulo 6 devices modu680-AS installed with Software CASE Suite v5.2 SR5all versionsfixedsauter_psirtCH

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2025-060Sauter: Multiple vulnerabilities in SAUTER modulo 6 2025-10-21csaf · sauter_psirtCH
Vulnerabilities have been discovered in the embedded firmware of SAUTER modulo 6 devices. These vulnerabilities affect the embedded web server as well as the interface to the SAUTER CASE Suite tools.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd sauter_psirt NVD CVE.org MITRE

published 2025-10-22modified 2026-10-18

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan