Remote Denial of Service Vulnerability in WSCServer by Sauter
CVE-2025-41724

7.5HIGH

Key Information:

Vendor

Sauter

Status
Modulo 6 Devices Modu680-as
Modulo 6 Devices Modu660-as
Modulo 6 Devices Modu612-lc
Ey-modulo 5 Modu 5 Modu524
Vendor
CVE Published:
22 October 2025

What is CVE-2025-41724?

The WSCServer by Sauter is susceptible to a vulnerability that allows unauthenticated remote attackers to crash the server by sending incomplete SOAP requests. This disruption requires a complete device reboot, as the server process will not restart automatically, leading to significant downtime and service disruption.

Affected Version(s)

EY-modulo 5 ecos 5 ecos504/505 0.0

EY-modulo 5 modu 5 modu524 0.0

EY-modulo 5 modu 5 modu525 0.0

References

https://sauter.csaf-tp.certvde.com/.well-known/csaf/white...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T
.