Sauter vulnerabilities
We track 5 vulnerabilities in Sauter products across 11 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 1, 2026.
Latest Sauter vulnerabilities
- 9.3 Critical severity
modu680-AS: Time-of-check Time-of-use (TOCTOU) Race Condition
A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of un
- 7.5 High severity
modulo 6 devices modu680-AS: Failure to Handle Incomplete Element
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
- 9.8 Critical severity
modulo 6 devices modu680-AS: Path Traversal: '.../...//'
The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations.
- 7.5 High severity
modulo 6 devices modu680-AS: Use of Hard-coded Credentials
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.
- 8.8 High severity
modulo 6 devices modu680-AS: Improper Validation of Syntactic Correctness of Input
A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsupported characters which leads to deletion of all previously configured users and the creation of the default Administrator with a known default