Sauter-controls vulnerabilities
We track 3 vulnerabilities in Sauter-controls products across 12 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 2, 2023.
Latest Sauter-controls vulnerabilities
- 7.5 High severity
Nova 220 (EYK220F001) DDC with BACnet connection: Cleartext Transmission of Sensitive Information
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management. Any sensitive information communicated through these protocols, such as credentials, is
- 8.8 High severity
Nova 220 (EYK220F001) DDC with BACnet connection: Missing Authentication for Critical Functionality
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device mana
- 9.6 Critical severity
moduWeb: Improper Neutralization of Input During Web Page Generation
SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in user