CVE-2025-41724highCWE-239

CVE-2025-41724: falha de alta gravidade em Sauter EY-modulo 5 ecos 5 ecos504/505

Sauter: Crash via Incomplete SOAP Request

Publicada em

Seguir esta CVE+ Monitorar EY-modulo 5 ecos 5 ecos504/505+ Monitorar EY-modulo 5 modu 5 modu524

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.5%
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Sauter · EY-modulo 5 ecos 5 ecos504/505Sauter · EY-modulo 5 modu 5 modu524Sauter · EY-modulo 5 modu 5 modu525Sauter · modulo 6 devices modu612-LCSauter · modulo 6 devices modu660-ASSauter · modulo 6 devices modu680-AS
CVEs relacionadas — Sauter EY-modulo 5 ecos 5 ecos504/505

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41723CRITICALSauter: Directory Traversal in importFile SOAP MethodEPSS 1.3%CVE-2025-41719HIGHSauter: Improper Validation of user-controlled dataEPSS 0.5%CVE-2025-41722HIGHSauter: Hard-coded Authentication CredentialsEPSS 0.3%CVE-2025-41721LOWSauter: Command InjectionEPSS 0.2%CVE-2025-41720MEDIUMSauter: Arbitrary File UploadEPSS 0.2%