CVE-2023-0053

🗓️ 02 Mar 2023 00:15:49Reported by icscertType

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have a cleartext credentials vulnerability

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-0053	2 Mar 202307:34	–	circl
CNNVD	Sauter AG Controls Nova 安全漏洞	13 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-0053 SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information	2 Mar 202300:15	–	cvelist
EUVD	EUVD-2023-12156	3 Oct 202520:07	–	euvd
ICS	SAUTER Controls Nova 200 - 220 Series (PLC 6)	12 Jan 202300:00	–	ics
NVD	CVE-2023-0053	2 Mar 202301:15	–	nvd
Prion	Information disclosure	2 Mar 202301:15	–	prion
Positive Technologies	PT-2023-15973 · Sauter · Sauter Controls Nova 200–220 Series	16 Jan 202300:00	–	ptsecurity
The Hacker News	CISA Warns of Flaws Affecting Industrial Control Systems from Major Manufacturers	16 Jan 202310:47	–	thn
The Hacker News	CISA Warns of Flaws Affecting Industrial Control Systems from Major Manufacturers	16 Jan 202310:47	–	thn

NVD

Vulners

Node

sauter-controls nova_220_eyk220f001_firmwareRange≤3.3-006

AND

sauter-controls nova_220_eyk220f001Match-

Node

sauter-controls nova_230_eyk230f001_firmwareRange≤3.3-006

AND

sauter-controls nova_230_eyk230f001Match-

Node

sauter-controls nova_106_eyk300f001_firmwareRange≤3.3-006

AND

sauter-controls nova_106_eyk300f001Match-

Node

sauter-controls modunet300_ey-am300f001_firmwareRange≤3.3-006

AND

sauter-controls modunet300_ey-am300f001Match-

Node

sauter-controls modunet300_ey-am300f002_firmwareRange≤3.3-006

AND

sauter-controls modunet300_ey-am300f002Match-

Node

sauter-controls bacnetstacRange≤4.2.1

[
  {
    "defaultStatus": "unaffected",
    "product": "Nova 220 (EYK220F001) DDC with BACnet connection",
    "vendor": "SAUTER Controls",
    "versions": [
      {
        "lessThanOrEqual": "3.3-006",
        "status": "affected",
        "version": "Firmware all versions",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.2.1",
        "status": "affected",
        "version": "BACnetstac all versions",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Nova 230 (EYK230F001) DDC with BACnet connection",
    "vendor": "SAUTER Controls",
    "versions": [
      {
        "lessThanOrEqual": "3.3-006",
        "status": "affected",
        "version": "Firmware all versions",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.2.1",
        "status": "affected",
        "version": "BACnetstac all versions",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Nova 106 (EYK300F001) BACnet communication card",
    "vendor": "SAUTER Controls",
    "versions": [
      {
        "lessThanOrEqual": "3.3-006",
        "status": "affected",
        "version": "Firmware all versions",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.2.1",
        "status": "affected",
        "version": "BACnetstac all versions",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "moduNet300 (EY-AM300F001, EY-AM300F002)",
    "vendor": "SAUTER Controls",
    "versions": [
      {
        "lessThanOrEqual": "3.3-006",
        "status": "affected",
        "version": "Firmware all versions",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.2.1",
        "status": "affected",
        "version": "BACnetstac all versions",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-012-05

21 Nov 2024 07:36Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.0011

SSVC

CWE-319