Vulnerabilities

TI-2023-00049 CVE-2023-0053 · GHSA-433q-36rv-j5jj

SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information

LOW 39

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00386 Published 2023-03-02 No fix listed CWE-319

TI-2023-00048 CVE-2023-0052 · GHSA-fr44-f297-ppg9

SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function

MEDIUM 50

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0074 Published 2023-01-20 No fix listed CWE-306

Vulnerabilities

Filters

SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information

SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function