Skip to content
OpenAdvisories
Critical VDE-2026-093 1 CVE

SAUTER: modulo 6 and EY-modulo 5 Vulnerability in Firmware update mechanism allowing remote code execution

Published Sep 1, 2026 · Updated Sep 1, 2026

Vendor: Sauter Product: ecos504 Product: ecos505 Product: EY-modulo 5 embedded software Product: modu612-LC Product: modu660-AS Product: modu680-AS Product: modulo 6 embedded software

Summary

A vulnerability has been found in the firmware update process of SAUTER Building Controllers. The identified vulnerability could allow unauthorized code execution on affected controllers.

Details

Remediation
On ecos504 (EY-RC504F***) and ecos505 (EY-RC505F***) update to firmware version 7.0.0. or newer.

On modu680-AS (EY6AS80F021), modu660-AS (EY6AS60F011)) and modu612-LC (EY6LC12F011), update to firmware version 4.0.0 or newer.

Contact your local SAUTER representative if you need further assistance.

Impact
An attacker who successfully exploits this vulnerability may gain full control of the device, potentially affecting the operation, reliability, and security of connected building automation functions.

Vulnerabilities 1

  • Critical 9.3
    CVE-2026-78319

    TOCTOU Vulnerability in file exchange

    A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of u…

    Sauter modu660-AS ecos504 modu680-AS

Revision history

  1. #1.0.0

    Initial revision

References