CVE-2025-41719highCWE-1286

CVE-2025-41719: falha de alta gravidade em Sauter EY-modulo 5 ecos 5 ecos504/505

Sauter: Improper Validation of user-controlled data

Publicada em

Seguir esta CVE+ Monitorar EY-modulo 5 ecos 5 ecos504/505+ Monitorar EY-modulo 5 modu 5 modu524

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.5%
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the default Administrator with a known default password.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Sauter · EY-modulo 5 ecos 5 ecos504/505Sauter · EY-modulo 5 modu 5 modu524Sauter · EY-modulo 5 modu 5 modu525Sauter · modulo 6 devices modu612-LCSauter · modulo 6 devices modu660-ASSauter · modulo 6 devices modu680-AS
CVEs relacionadas — Sauter EY-modulo 5 ecos 5 ecos504/505

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41723CRITICALSauter: Directory Traversal in importFile SOAP MethodEPSS 1.3%CVE-2025-41724HIGHSauter: Crash via Incomplete SOAP RequestEPSS 0.5%CVE-2025-41722HIGHSauter: Hard-coded Authentication CredentialsEPSS 0.3%CVE-2025-41721LOWSauter: Command InjectionEPSS 0.2%CVE-2025-41720MEDIUMSauter: Arbitrary File UploadEPSS 0.2%