CVE-2023-0053
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet available for device management. Any sensitive information communicated through these protocols, such as credentials, is sent in cleartext. An attacker could obtain sensitive information such as user credentials to gain access to the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Nova 220 (EYK220F001) DDC with BACnet connection
- Vendor
- SAUTER Controls
- Product
- Nova 220 (EYK220F001) DDC with BACnet connection
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |
Nova 230 (EYK230F001) DDC with BACnet connection
- Vendor
- SAUTER Controls
- Product
- Nova 230 (EYK230F001) DDC with BACnet connection
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |
Nova 106 (EYK300F001) BACnet communication card
- Vendor
- SAUTER Controls
- Product
- Nova 106 (EYK300F001) BACnet communication card
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |
moduNet300 (EY-AM300F001, EY-AM300F002)
- Vendor
- SAUTER Controls
- Product
- moduNet300 (EY-AM300F001, EY-AM300F002)
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Firmware all versions | affected | custom | Unavailable | 3.3-006 | None listed |
| BACnetstac all versions | affected | custom | Unavailable | 4.2.1 | None listed |