CVE-2025-41719 — Sauter: Improper Validation of user-controlled data

Description (CNA)

A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the default Administrator with a known default password.

Affected (CNA)

Vendor / product	Versions
Sauter / modulo 6 devices modu680-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu660-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu612-LC	affected 0.0.0 before Firmware v3.2.0
Sauter / EY-modulo 5 modu 5 modu524	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 modu 5 modu525	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 ecos 5 ecos504/505	affected 0.0 before Firmware v6.0

CWE

CWE-1286

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.