CVE-2025-41722: Sauter Ey-Modulo 5 Ecos 5 ECOS504/505

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.

Affected products

• Sauter Ey-Modulo 5 Ecos 5 ECOS504/505
• Sauter Ey-Modulo 5 Modu 5 MODU524
• Sauter Ey-Modulo 5 Modu 5 MODU525
• Sauter Modulo 6 Devices MODU612-Lc
• Sauter Modulo 6 Devices MODU660-As
• Sauter Modulo 6 Devices MODU680-As

Published 2025-10-22. Last modified 2026-06-17.