Vendor
Sauter
12 known vulnerabilities.
Products
modulo 6 devices modu680-AS 6
modulo 6 devices modu660-AS 6
modulo 6 devices modu612-LC 6
EY-modulo 5 modu 5 modu524 6
EY-modulo 5 modu 5 modu525 6
EY-modulo 5 ecos 5 ecos504/505 6
EY-AS525F001 with moduWeb 5
modu680-AS 1
modu660-AS 1
modu612-LC 1
ecos504 1
ecos505 1
EY-WS505F0x0 moduWeb Vision 0
EY-modulo 5 Building Automation Station 0
NovaWeb web HMI 0
EY-modulo 5 embedded software 0
modulo 6 embedded software 0
3 results · Clear filters · Feed
-
High 7.5
Sauter: Crash via Incomplete SOAP Request
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
-
High 7.5
Sauter: Hard-coded Authentication Credentials
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.
-
High 8.8
Sauter: Improper Validation of user-controlled data
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the default Administrator with a known defaul…