Back to Database
Status published
Low
CVE-2025-41721
Sauter: Command Injection
Vulnerability Description
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41721
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Damian Pfammatter, Daniel Hulliger from Cyber-Defence Campus armasuisse S+T
More from Sauter
View All →CVE-2025-41724
Sauter: Crash via Incomplete SOAP Request
High
7.5
CVE-2025-41723
Sauter: Directory Traversal in importFile SOAP Method
Critical
9.8
CVE-2025-41722
Sauter: Hard-coded Authentication Credentials
High
7.5
CVE-2025-41720
Sauter: Arbitrary File Upload
Medium
4.3
CVE-2025-41719
Sauter: Improper Validation of user-controlled data
High
8.8
Affected Vendor
Sauter
View all reports →Affected Software
modulo 6 devices modu680-AS, modulo 6 devices modu660-AS, modulo 6 devices modu612-LC, EY-modulo 5 modu 5 modu524, EY-modulo 5 modu 5 modu525, EY-modulo 5 ecos 5 ecos504/505
Vulnerable Versions:
0.0.0, 0.0
Timeline
Official Publish:
October 22nd, 2025
Last Modified:
October 22nd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N