CVE-2025-41721 — Sauter: Command Injection

Description (CNA)

A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate.

Affected (CNA)

Vendor / product	Versions
Sauter / modulo 6 devices modu680-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu660-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu612-LC	affected 0.0.0 before Firmware v3.2.0
Sauter / EY-modulo 5 modu 5 modu524	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 modu 5 modu525	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 ecos 5 ecos504/505	affected 0.0 before Firmware v6.0

CWE

CWE-77

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.