SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information
CVE-2023-0053

7.5HIGH

Key Information:

Vendor

Sauter Controls

Status
Nova 220 (eyk220f001) Ddc With Bacnet Connection
Nova 230 (eyk230f001) Ddc With Bacnet Connection
Nova 106 (eyk300f001) Bacnet Communication Card
Modunet300 (ey-am300f001, Ey-am300f002)
Vendor
CVE Published:
2 March 2023

What is CVE-2023-0053?

The SAUTER Controls Nova 200–220 Series devices, when operating on firmware versions 3.3-006 and earlier, and BACnetstac versions 4.2.1 and prior, have been found to only support FTP and Telnet for device management. This reliance on outdated and insecure protocols means that all sensitive data, including user credentials, is transmitted in cleartext. As a result, an attacker monitoring network traffic can easily intercept this information, leading to unauthorized access and potential exploitation of the system.

Affected Version(s)

moduNet300 (EY-AM300F001, EY-AM300F002) Firmware all versions <= 3.3-006

moduNet300 (EY-AM300F001, EY-AM300F002) BACnetstac all versions <= 4.2.1

Nova 106 (EYK300F001) BACnet communication card Firmware all versions <= 3.3-006

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jairo Alonso Ortiz, Aarón Flecha Menéndez and Iñaki Lázaro Ayanz of S21Sec
.