CVE-2025-41722 — Sauter: Hard-coded Authentication Credentials

Description (CNA)

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.

Affected (CNA)

Vendor / product	Versions
Sauter / modulo 6 devices modu680-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu660-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu612-LC	affected 0.0.0 before Firmware v3.2.0
Sauter / EY-modulo 5 modu 5 modu524	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 modu 5 modu525	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 ecos 5 ecos504/505	affected 0.0 before Firmware v6.0

CWE

CWE-798

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.