CVE-2025-41723: Sauter Ey-Modulo 5 Ecos 5 ECOS504/505

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations.

Affected products

• Sauter Ey-Modulo 5 Ecos 5 ECOS504/505
• Sauter Ey-Modulo 5 Modu 5 MODU524
• Sauter Ey-Modulo 5 Modu 5 MODU525
• Sauter Modulo 6 Devices MODU612-Lc
• Sauter Modulo 6 Devices MODU660-As
• Sauter Modulo 6 Devices MODU680-As

Published 2025-10-22. Last modified 2026-06-17.