Nova 230 (EYK230F001) DDC with BACnet connection vulnerabilities

2 known vulnerabilities in Nova 230 (EYK230F001) DDC with BACnet connection from Sauter-controls. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Nova 220 (EYK220F001) DDC with BACnet connection: Cleartext Transmission of Sensitive Information

  CVE-2023-0053Mar 2, 2023Sauter-controls

  SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management. Any sensitive information communicated through these protocols, such as credentials, is

• 8.8 High severity

  Nova 220 (EYK220F001) DDC with BACnet connection: Missing Authentication for Critical Functionality

  CVE-2023-0052Jan 20, 2023Sauter-controls

  SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device mana