Sauter-Controls
11 CVEs across 22 Sauter-Controls products. Browse Sauter-Controls vulnerabilities, severities, and proof-of-concept exploits.
Sauter-Controls products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28655 | Medium | 5.4 | 2023-03-27 | A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context of the targeted privileged users. |
CVE-2023-28652 | Medium | 6.5 | 2023-03-27 | An authenticated malicious user could successfully upload a malicious image could lead to a denial-of-service condition. |
CVE-2023-28650 | Medium | 6.1 | 2023-03-27 | An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If clicked, the attacker could execute th… |
CVE-2023-27927 | Medium | 6.5 | 2023-03-27 | An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behi… |
CVE-2023-22300 | Medium | 6.1 | 2023-03-27 | An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the logs. This… |
CVE-2023-0053 | High | 7.5 | 2023-03-02 | SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for dev… |
CVE-2023-0052 | Critical | 9.8 | 2023-01-20 | SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without cre… |
CVE-2022-40190 | High | 8.8 | 2022-10-31 | SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request… |
CVE-2018-17912 | High | 7.5 | 2018-11-02 | An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure. |
CVE-2016-10224 | High | 7.2 | 2017-02-13 | An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the existence or values of a cookie, but it does… |
CVE-2015-7916 | Medium | 6.5 | 2016-02-06 | Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or… |