CVE-2023-0053CWE-319

SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information

High · published March 2, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and

prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet

available for device management. Any sensitive information communicated

through these protocols, such as credentials, is sent in cleartext. An

attacker could obtain sensitive information such as user credentials to

gain access to the system.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-03-02T00:15Z
EPSS history
Timeline
  • 02 MAR 00:15Z
    SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information
    cvelistv5