Improper Parameter Handling in OpenSSL Command for Self-Signed Certificate Management by Vendor
CVE-2025-41721

2.7LOW

Key Information:

Vendor

Sauter

Status
Modulo 6 Devices Modu680-as
Modulo 6 Devices Modu660-as
Modulo 6 Devices Modu612-lc
Ey-modulo 5 Modu 5 Modu524
Vendor
CVE Published:
22 October 2025

What is CVE-2025-41721?

A vulnerability exists in the OpenSSL command line tool that allows a remote attacker with high privileges to manipulate the parameters passed to the command. This is due to inadequate handling of special elements when adding a password protected self-signed certificate, which could lead to unauthorized access or further exploitation of systems dependent on this functionality.

Affected Version(s)

EY-modulo 5 ecos 5 ecos504/505 0.0

EY-modulo 5 modu 5 modu524 0.0

EY-modulo 5 modu 5 modu525 0.0

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white...

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T
.