CVE-2025-41723 — Sauter: Directory Traversal in importFile SOAP Method

Description (CNA)

The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations.

Affected (CNA)

Vendor / product	Versions
Sauter / modulo 6 devices modu680-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu660-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu612-LC	affected 0.0.0 before Firmware v3.2.0
Sauter / EY-modulo 5 modu 5 modu524	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 modu 5 modu525	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 ecos 5 ecos504/505	affected 0.0 before Firmware v6.0

CWE

CWE-35

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.