CVE-2025-41722

Full vulnerability record from the local CVENow database.
Description

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.
Severity
HIGH
CVSS score
7.5 (v3.1)
Vulnerability status
Deferred
Source identifier
[email protected]
Published
2025-10-22 07:15:33.640000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
  "id": "CVE-2025-41722",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-22T07:15:33.640",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices."
    },
    {
      "lang": "es",
      "value": "El servidor wsc utiliza un certificado codificado de forma rígida para verificar la autenticidad de los mensajes SOAP. Un atacante remoto no autenticado puede extraer claves privadas del software de los dispositivos afectados."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Sauter",
          "product": "modulo 6 devices modu680-AS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "Firmware v3.2.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "modulo 6 devices modu660-AS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "Firmware v3.2.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "modulo 6 devices modu612-LC",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "Firmware v3.2.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "EY-modulo 5 modu 5 modu524",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThan": "Firmware v6.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "EY-modulo 5 modu 5 modu525",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThan": "Firmware v6.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "EY-modulo 5 ecos 5 ecos504/505",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThan": "Firmware v6.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-22T13:29:56.589615Z",
          "id": "CVE-2025-41722",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json",
      "source": "[email protected]"
    }
  ]
}