Critical severity9.8NVD Advisory· Published Jan 20, 2023· Updated Jun 17, 2026
CVE-2023-0052
CVE-2023-0052
Description
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:o:sauter-controls:modunet300_ey-am300f001_firmware:*:*:*:*:*:*:*:*Range: <=3.3-006
- cpe:2.3:o:sauter-controls:modunet300_ey-am300f002_firmware:*:*:*:*:*:*:*:*Range: <=3.3-006
- cpe:2.3:o:sauter-controls:nova_106_eyk300f001_firmware:*:*:*:*:*:*:*:*Range: <=3.3-006
- cpe:2.3:o:sauter-controls:nova_220_eyk220f001_firmware:*:*:*:*:*:*:*:*Range: <=3.3-006
- cpe:2.3:o:sauter-controls:nova_230_eyk230f001_firmware:*:*:*:*:*:*:*:*Range: <=3.3-006
- Range: <=4.2.1
- Range: <=3.3-006
- Range: Firmware all versions
- Range: Firmware all versions
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsa-23-012-05nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.