CVE-2025-41723 | Sauter EY-modulo 5 ecos 5 ecos505 up to 3.1.x SOAP importFile path traversal (vde-2025-060)

October 22, 2025 Yanac

A vulnerability classified as critical has been found in Sauter Modulo 6 Devices modu680-AS, Modulo 6 Devices modu660-AS, Modulo 6 Devices modu612-LC, EY-modulo 5 modu 5 modu524, EY-modulo 5 modu 5 modu525, EY-modulo 5 ecos 5 ecos504 and EY-modulo 5 ecos 5 ecos505 up to 3.1.x. This affects the function importFile of the component SOAP. This manipulation causes path traversal: ‘…/…//’.

This vulnerability appears as CVE-2025-41723. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More