Vulnerabilities > Sauter Controls > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-02 CVE-2023-0053 Cleartext Transmission of Sensitive Information vulnerability in Sauter-Controls products
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management.
network
low complexity
sauter-controls CWE-319
7.5
2023-01-20 CVE-2023-0052 Missing Authentication for Critical Function vulnerability in Sauter-Controls products
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials.
network
low complexity
sauter-controls CWE-306
8.8
2018-11-02 CVE-2018-17912 XXE vulnerability in Sauter-Controls Case Suite 3.10
An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.
network
low complexity
sauter-controls CWE-611
7.5
2017-02-13 CVE-2016-10224 7PK - Security Features vulnerability in Sauter-Controls Novaweb web HMI
An issue was discovered in Sauter NovaWeb web HMI.
network
low complexity
sauter-controls CWE-254
7.2