CVE-2025-41720: Sauter Ey-Modulo 5 Ecos 5 ECOS504/505

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified.

Affected products

• Sauter Ey-Modulo 5 Ecos 5 ECOS504/505
• Sauter Ey-Modulo 5 Modu 5 MODU524
• Sauter Ey-Modulo 5 Modu 5 MODU525
• Sauter Modulo 6 Devices MODU612-Lc
• Sauter Modulo 6 Devices MODU660-As
• Sauter Modulo 6 Devices MODU680-As

Published 2025-10-22. Last modified 2026-06-17.