TOCTOU Vulnerability in file exchange
Priority MEDIUM 49CWE-367Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00607 49th percentileScored 2026-11-07
Fix Fixed modu680-AS (Sauter): 4.0.0modu660-AS (Sauter): 4.0.0+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Sauter | modu680-AS | 1.0.0 to before 4.0.0 | 4.0.0 | Patch available | CNA |
| Sauter | modu660-AS | 1.0.0 to before 4.0.0 | 4.0.0 | Patch available | CNA |
| Sauter | modu612-LC | 1.0.0 to before 4.0.0 | 4.0.0 | Patch available | CNA |
| Sauter | ecos504 | 1.0.0 to before 7.0.0 | 7.0.0 | Patch available | CNA |
| Sauter | ecos505 | 1.0.0 to before 7.0.0 | 7.0.0 | Patch available | CNA |
- modu680-AS VendorSauter Affected 1.0.0 to before 4.0.0 Fixed in 4.0.0 Patch available CNA
- modu660-AS VendorSauter Affected 1.0.0 to before 4.0.0 Fixed in 4.0.0 Patch available CNA
- modu612-LC VendorSauter Affected 1.0.0 to before 4.0.0 Fixed in 4.0.0 Patch available CNA
- ecos504 VendorSauter Affected 1.0.0 to before 7.0.0 Fixed in 7.0.0 Patch available CNA
- ecos505 VendorSauter Affected 1.0.0 to before 7.0.0 Fixed in 7.0.0 Patch available CNA
Remediation
- Fix · CNA modu680-AS (Sauter) Fixed in 4.0.0
- Fix · CNA modu660-AS (Sauter) Fixed in 4.0.0
- Fix · CNA modu612-LC (Sauter) Fixed in 4.0.0
- Fix · CNA ecos504 (Sauter) Fixed in 7.0.0
- Fix · CNA ecos505 (Sauter) Fixed in 7.0.0
Timeline
- 2026-10-02 Threatist record created from CVE-2026-78319
- 2026-10-03 Alias added: GHSA-jc56-mhh5-666m
References
More Sauter vulnerabilities
- TI-2025-27686 Sauter: Directory Traversal in importFile SOAP Method CVSS 3.1CRITICAL 9.8
- TI-2015-06584 Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows… CVSS 3.0CRITICAL 9.8
- TI-2015-06583 Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass… CVSS 3.0HIGH 8.1
- TI-2025-27682 Sauter: Improper Validation of user-controlled data CVSS 3.1HIGH 8.8
- TI-2025-27685 Sauter: Hard-coded Authentication Credentials CVSS 3.1HIGH 7.5
- TI-2025-27687 Sauter: Crash via Incomplete SOAP Request CVSS 3.1HIGH 7.5
Sources
- CVE-2026-78319 · CVE Program
- CVE-2026-78319 · NVD
- FIRST EPSS
- GHSA-jc56-mhh5-666m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences