CVE-2023-0052

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

0.71%

Published

Jan 20, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306CWE-306

Affected Products (10)

sauter-controls · nova_220_eyk220f001_firmwarevulnerable

sauter-controls · nova_220_eyk220f001

sauter-controls · nova_230_eyk230f001_firmwarevulnerable

sauter-controls · nova_230_eyk230f001

sauter-controls · nova_106_eyk300f001_firmwarevulnerable

sauter-controls · nova_106_eyk300f001

sauter-controls · modunet300_ey-am300f001_firmwarevulnerable

sauter-controls · modunet300_ey-am300f001

sauter-controls · modunet300_ey-am300f002_firmwarevulnerable

sauter-controls · modunet300_ey-am300f002

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs