CVE-2025-41724 — Sauter: Crash via Incomplete SOAP Request

Description (CNA)

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.

Affected (CNA)

Vendor / product	Versions
Sauter / modulo 6 devices modu680-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu660-AS	affected 0.0.0 before Firmware v3.2.0
Sauter / modulo 6 devices modu612-LC	affected 0.0.0 before Firmware v3.2.0
Sauter / EY-modulo 5 modu 5 modu524	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 modu 5 modu525	affected 0.0 before Firmware v6.0
Sauter / EY-modulo 5 ecos 5 ecos504/505	affected 0.0 before Firmware v6.0

CWE

CWE-239

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.