SOAP Message Authentication Vulnerability in Sauter WSC Server
CVE-2025-41722

7.5HIGH

Key Information:

Vendor

Sauter

Status
Modulo 6 Devices Modu680-as
Modulo 6 Devices Modu660-as
Modulo 6 Devices Modu612-lc
Ey-modulo 5 Modu 5 Modu524
Vendor
CVE Published:
22 October 2025

What is CVE-2025-41722?

The Sauter WSC Server contains a vulnerability where a hard-coded certificate is employed to validate the authenticity of SOAP messages. This presents a significant risk, as it permits unauthenticated remote attackers to extract private keys from the impacted devices, potentially compromising the confidentiality and integrity of sensitive communications.

Affected Version(s)

EY-modulo 5 ecos 5 ecos504/505 0.0

EY-modulo 5 modu 5 modu524 0.0

EY-modulo 5 modu 5 modu525 0.0

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T
.