SAUTER EY-modulo 5 Building Automation Stations

Risk Summary

Successful exploitation of these vulnerabilities could lead to privilege escalation, unauthorized execution of actions, a denial-of-service condition, or retrieval of sensitive information.

CVEs (5)

Remediations

• According to SAUTER, the EY-modulo 5 Building Automation Stations product line does not support encryption on its communication protocols. As such, it is not appropriate for open networks.
• Instead of using EY-AS525F001 with moduWeb, SAUTER recommends using EY6AS80F021 with moduWeb Unity. moduWeb Unity is the current system and supports encrypted communication with TLS.
• SAUTER recommends users take all necessary measures to protect the integrity of building automation networks, restrict access to the devices, and leverage all appropriate means and policies to minimize risks. Users should evaluate and upgrade legacy systems to current solutions where necessary.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing, Energy