CVE-2025-41722

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-41722", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-04-16T11:17:48.317Z", "datePublished": "2025-10-22T06:58:31.679Z", "dateUpdated": "2025-10-22T13:30:10.827Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "modulo 6 devices modu680-AS", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v3.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "modulo 6 devices modu660-AS", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v3.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "modulo 6 devices modu612-LC", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v3.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EY-modulo 5 modu 5 modu524", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v6.0", "status": "affected", "version": "0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EY-modulo 5 modu 5 modu525", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v6.0", "status": "affected", "version": "0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EY-modulo 5 ecos 5 ecos504/505", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v6.0", "status": "affected", "version": "0.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices."}], "value": "The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-798", "description": "CWE-798 Use of Hard-coded Credentials", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-10-22T06:58:31.679Z"}, "references": [{"url": "https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json"}], "source": {"advisory": "VDE-2025-060", "defect": ["CERT@VDE#641818"], "discovery": "UNKNOWN"}, "title": "Sauter: Hard-coded Authentication Credentials", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-22T13:29:56.589615Z", "id": "CVE-2025-41722", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-22T13:30:10.827Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-41722", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-22T13:29:56.589615Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-22T13:30:01.031Z"}}], "cna": {"title": "Sauter: Hard-coded Authentication Credentials", "source": {"defect": ["CERT@VDE#641818"], "advisory": "VDE-2025-060", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Sauter", "product": "modulo 6 devices modu680-AS", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "Firmware v3.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Sauter", "product": "modulo 6 devices modu660-AS", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "Firmware v3.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Sauter", "product": "modulo 6 devices modu612-LC", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "Firmware v3.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Sauter", "product": "EY-modulo 5 modu 5 modu524", "versions": [{"status": "affected", "version": "0.0", "lessThan": "Firmware v6.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Sauter", "product": "EY-modulo 5 modu 5 modu525", "versions": [{"status": "affected", "version": "0.0", "lessThan": "Firmware v6.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Sauter", "product": "EY-modulo 5 ecos 5 ecos504/505", "versions": [{"status": "affected", "version": "0.0", "lessThan": "Firmware v6.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.", "supportingMedia": [{"type": "text/html", "value": "The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-798", "description": "CWE-798 Use of Hard-coded Credentials"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-10-22T06:58:31.679Z"}}}, "cveMetadata": {"cveId": "CVE-2025-41722", "state": "PUBLISHED", "dateUpdated": "2025-10-22T13:30:10.827Z", "dateReserved": "2025-04-16T11:17:48.317Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2025-10-22T06:58:31.679Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "modulo 6 devices modu680-AS", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v3.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "modulo 6 devices modu660-AS", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v3.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "modulo 6 devices modu612-LC", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v3.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EY-modulo 5 modu 5 modu524", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v6.0", "status": "affected", "version": "0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EY-modulo 5 modu 5 modu525", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v6.0", "status": "affected", "version": "0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "EY-modulo 5 ecos 5 ecos504/505", "vendor": "Sauter", "versions": [{"lessThan": "Firmware v6.0", "status": "affected", "version": "0.0", "versionType": "semver"}]}], "source": "info@cert.vde.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices."}, {"lang": "es", "value": "El servidor wsc utiliza un certificado codificado de forma r\u00edgida para verificar la autenticidad de los mensajes SOAP. Un atacante remoto no autenticado puede extraer claves privadas del software de los dispositivos afectados."}], "id": "CVE-2025-41722", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "info@cert.vde.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41722", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-22T13:29:56.589615Z", "version": "2.0.3"}}]}, "published": "2025-10-22T07:15:33.640", "references": [{"source": "info@cert.vde.com", "url": "https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "info@cert.vde.com", "type": "Secondary"}]}

{}

{"created": "2025-10-23T10:07:57.052630+00:00", "updated": "2025-10-23T10:07:57.052656+00:00", "vendors": ["sauter", "sauter$PRODUCT$ey-modulo_5_devices", "sauter$PRODUCT$modulo_6_devices"]}