Directory Traversal Vulnerability in Vendor Product
CVE-2025-41723

9.8CRITICAL

Key Information:

Vendor

Sauter

Status
Modulo 6 Devices Modu680-as
Modulo 6 Devices Modu660-as
Modulo 6 Devices Modu612-lc
Ey-modulo 5 Modu 5 Modu524
Vendor
CVE Published:
22 October 2025

What is CVE-2025-41723?

The importFile SOAP method exposes a critical security flaw that allows an unauthenticated remote attacker to exploit directory traversal. This vulnerability enables attackers to bypass restrictions and potentially upload files to arbitrary locations on the server, posing significant risks to data integrity and system security. It is crucial for users of affected versions to implement immediate mitigations to protect their systems from unauthorized access and data manipulation.

Affected Version(s)

EY-modulo 5 ecos 5 ecos504/505 0.0

EY-modulo 5 modu 5 modu524 0.0

EY-modulo 5 modu 5 modu525 0.0

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T
.