7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.
Basic Information
ID
CVE-2025-41722
Source
CERTVDE
Published
Oct 22, 2025 at 06:58
Affected Product
Vendor
Sauter
Product
modulo 6 devices modu680-AS
Version
0.0.0
Affected Versions
Sauter modulo 6 devices modu680-AS 0.0.0
Sauter modulo 6 devices modu660-AS 0.0.0
Sauter modulo 6 devices modu612-LC 0.0.0
Sauter EY-modulo 5 modu 5 modu524 0.0
Sauter EY-modulo 5 modu 5 modu525 0.0
Sauter EY-modulo 5 ecos 5 ecos504/505 0.0
Sauter modulo 6 devices modu660-AS 0.0.0
Sauter modulo 6 devices modu612-LC 0.0.0
Sauter EY-modulo 5 modu 5 modu524 0.0
Sauter EY-modulo 5 modu 5 modu525 0.0
Sauter EY-modulo 5 ecos 5 ecos504/505 0.0