CVE-2025-41724

Full vulnerability record from the local CVENow database.
Description

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
Severity
HIGH
CVSS score
7.5 (v3.1)
Vulnerability status
Deferred
Source identifier
[email protected]
Published
2025-10-22 07:15:33.983000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
  "id": "CVE-2025-41724",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-22T07:15:33.983",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto no autenticado puede provocar la caída del wscserver al enviar solicitudes SOAP incompletas. El proceso wscserver no se reiniciará por un watchdog y un reinicio del dispositivo es necesario para que vuelva a funcionar."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Sauter",
          "product": "modulo 6 devices modu680-AS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "Firmware v3.2.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "modulo 6 devices modu660-AS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "Firmware v3.2.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "modulo 6 devices modu612-LC",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0.0",
              "lessThan": "Firmware v3.2.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "EY-modulo 5 modu 5 modu524",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThan": "Firmware v6.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "EY-modulo 5 modu 5 modu525",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThan": "Firmware v6.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Sauter",
          "product": "EY-modulo 5 ecos 5 ecos504/505",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0.0",
              "lessThan": "Firmware v6.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-22T15:48:31.778178Z",
          "id": "CVE-2025-41724",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-239"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json",
      "source": "[email protected]"
    }
  ]
}