7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
Basic Information
ID
CVE-2025-41724
Source
CERTVDE
Published
Oct 22, 2025 at 07:03
Affected Product
Vendor
Sauter
Product
modulo 6 devices modu680-AS
Version
0.0.0
Affected Versions
Sauter modulo 6 devices modu680-AS 0.0.0
Sauter modulo 6 devices modu660-AS 0.0.0
Sauter modulo 6 devices modu612-LC 0.0.0
Sauter EY-modulo 5 modu 5 modu524 0.0
Sauter EY-modulo 5 modu 5 modu525 0.0
Sauter EY-modulo 5 ecos 5 ecos504/505 0.0
Sauter modulo 6 devices modu660-AS 0.0.0
Sauter modulo 6 devices modu612-LC 0.0.0
Sauter EY-modulo 5 modu 5 modu524 0.0
Sauter EY-modulo 5 modu 5 modu525 0.0
Sauter EY-modulo 5 ecos 5 ecos504/505 0.0