1. Home
  2. CVE Database
  3. CVE-2023-0053
HIGH · 7.5

CVE-2023-0053

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management. Any sensitive information...

Vulnerability Description

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management. Any sensitive information communicated through these protocols, such as credentials, is sent in cleartext. An attacker could obtain sensitive information such as user credentials to gain access to the system.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Sauter-ControlsNova 220 Eyk220F001 Firmware<= 3.3-006
Sauter-ControlsNova 220 Eyk220F001-
Sauter-ControlsNova 230 Eyk230F001 Firmware<= 3.3-006
Sauter-ControlsNova 230 Eyk230F001-
Sauter-ControlsNova 106 Eyk300F001 Firmware<= 3.3-006
Sauter-ControlsNova 106 Eyk300F001-
Sauter-ControlsModunet300 Ey-Am300F001 Firmware<= 3.3-006
Sauter-ControlsModunet300 Ey-Am300F001-
Sauter-ControlsModunet300 Ey-Am300F002 Firmware<= 3.3-006
Sauter-ControlsModunet300 Ey-Am300F002-
Sauter-ControlsBacnetstac<= 4.2.1

Related Weaknesses (CWE)

CWE-319

References

FAQ

What is CVE-2023-0053?

CVE-2023-0053 is a vulnerability with a CVSS score of 7.5 (HIGH). SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management. Any sensitive information...

How severe is CVE-2023-0053?

CVE-2023-0053 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-0053?

Check the references section above for vendor advisories and patch information. Affected products include: Sauter-Controls Nova 220 Eyk220F001 Firmware, Sauter-Controls Nova 220 Eyk220F001, Sauter-Controls Nova 230 Eyk230F001 Firmware, Sauter-Controls Nova 230 Eyk230F001, Sauter-Controls Nova 106 Eyk300F001 Firmware.