TI-2025-27687 CVE-2025-41724 · GHSA-x578-m74x-8pg3
Sauter: Crash via Incomplete SOAP Request
Priority LOW 33
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests.
Vulnerabilities
6 records
Release: Sauter EY-modulo 5 ecos 5 ecos504/505, EY-modulo 5 modu 5 modu524 and 4 more products Firmware v3.2.0, Firmware v6.0 Clear all filters
TI-2025-27686 CVE-2025-41723 · GHSA-gw24-5v6p-pvvv
Sauter: Directory Traversal in importFile SOAP Method
Priority MEDIUM 52
The importFile SOAP method is vulnerable to a directory traversal attack.
TI-2025-27685 CVE-2025-41722 · GHSA-p5c4-4hc3-4fp5
Sauter: Hard-coded Authentication Credentials
Priority LOW 38
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages.
TI-2025-27684 CVE-2025-41721 · GHSA-qg9r-fg3h-59p8
Sauter: Command Injection
Priority LOW 13
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate.
TI-2025-27683 CVE-2025-41720 · GHSA-j942-4f9w-rfqh
Sauter: Arbitrary File Upload
Priority LOW 19
A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified.
TI-2025-27682 CVE-2025-41719 · GHSA-g47j-rw3x-mqxv
Sauter: Improper Validation of user-controlled data
Priority LOW 39
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the de…