Description
The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attacker can extract private keys from the Software of the affected devices.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Sauter modulo 6 devices modu680-AS
Default version status: unaffected
0.0.0 to < Firmware v3.2.0affected
Sauter modulo 6 devices modu660-AS
Default version status: unaffected
0.0.0 to < Firmware v3.2.0affected
Sauter modulo 6 devices modu612-LC
Default version status: unaffected
0.0.0 to < Firmware v3.2.0affected
Sauter EY-modulo 5 modu 5 modu524
Default version status: unaffected
0.0 to < Firmware v6.0affected
Sauter EY-modulo 5 modu 5 modu525
Default version status: unaffected
0.0 to < Firmware v6.0affected
Sauter EY-modulo 5 ecos 5 ecos504/505
Default version status: unaffected
0.0 to < Firmware v6.0affected