Sauter-controls Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/sauter-controls/ Sun, 26 Feb 2023 06:47:37 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Sauter-controls Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/sauter-controls/ 32 32 CVE-2018-17912 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17912/ Sun, 26 Feb 2023 06:47:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17912/ An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.

The post CVE-2018-17912 appeared first on CVE Vulnerability.

]]> An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.

The post CVE-2018-17912 appeared first on CVE Vulnerability.

]]> CVE-2022-40190 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-40190/ Thu, 23 Feb 2023 05:20:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-40190/ SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive information, including user credentials.

The post CVE-2022-40190 appeared first on CVE Vulnerability.

]]> SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive information, including user credentials.

The post CVE-2022-40190 appeared first on CVE Vulnerability.

]]> CVE-2023-0052 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0052/ Wed, 22 Feb 2023 14:02:11 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0052 SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in […]

The post CVE-2023-0052 appeared first on CVE Vulnerability.

]]> SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.

The post CVE-2023-0052 appeared first on CVE Vulnerability.

]]>