CVE-2023-0052
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Nova 220 (EYK220F001) DDC with BACnet connection
- Vendor
- SAUTER Controls
- Product
- Nova 220 (EYK220F001) DDC with BACnet connection
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |
Nova 230 (EYK230F001) DDC with BACnet connection
- Vendor
- SAUTER Controls
- Product
- Nova 230 (EYK230F001) DDC with BACnet connection
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |
Nova 106 (EYK300F001) BACnet communication card
- Vendor
- SAUTER Controls
- Product
- Nova 106 (EYK300F001) BACnet communication card
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |
moduNet300 (EY-AM300F001, EY-AM300F002)
- Vendor
- SAUTER Controls
- Product
- moduNet300 (EY-AM300F001, EY-AM300F002)
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |