Description
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Sauter modulo 6 devices modu680-AS
Default version status: unaffected
0.0.0 to < Firmware v3.2.0affected
Sauter modulo 6 devices modu660-AS
Default version status: unaffected
0.0.0 to < Firmware v3.2.0affected
Sauter modulo 6 devices modu612-LC
Default version status: unaffected
0.0.0 to < Firmware v3.2.0affected
Sauter EY-modulo 5 modu 5 modu524
Default version status: unaffected
0.0 to < Firmware v6.0affected
Sauter EY-modulo 5 modu 5 modu525
Default version status: unaffected
0.0 to < Firmware v6.0affected
Sauter EY-modulo 5 ecos 5 ecos504/505
Default version status: unaffected
0.0 to < Firmware v6.0affected