Critical · published January 20, 2023
🚨 An unauthorized user can execute commands on SAUTER Controls devices without any credentials! 🔥 Just imagine how wild that could get! Think of it like a hotel where anyone can walk in and manipulate the room settings without a key—no guard at the front desk, no verification at all! That's how dangerously accessible these devices are. If exploited, this vulnerability allows an attacker to not only modify device configurations but also execute unrestricted commands. That means they could take complete control of the system, leading to potentially devastating consequences such as altering settings or causing system failures. Yikes!
Think of it like a hotel where anyone can walk in and manipulate the room settings without a key—no guard at the front desk, no verification at all! That's how dangerously accessible these devices are. This vulnerability arises because the SAUTER Controls Nova 200–220 Series, running firmware version 3.3-006 and earlier, allows command execution via Telnet and FTP protocols without proper authentication.
If exploited, this vulnerability allows an attacker to not only modify device configurations but also execute unrestricted commands. That means they could take complete control of the system, leading to potentially devastating consequences such as altering settings or causing system failures. Yikes! Update your devices to firmware version 3.3-007 or later immediately. If you’re still using BACnetstac version 4.2.1 or earlier, be sure to upgrade that too. In the meantime, limit access to trusted users only! You've got this! With these steps, you can lock down your system and keep the bad guys out! 🛡️