CVE:CVE-2023-0053
CNNVD:CNNVD-202301-1117
Sauter AG Controls Nova是瑞士Sauter AG公司的一个智能楼宇自动化系统。
Sauter AG Controls Nova 200-220 Series固件3.3-006及以前版本和BACnetstac 4.2.1及以前版本存在安全漏洞，该漏洞源于其只有FTP和Telnet可用于设备管理。通过这些协议传达的任何敏感信息（如凭据）都以明文形式发送。攻击者可以获取敏感信息（如用户凭据）以获取对系统的访问权限。
solution:Upgrade sauter-controls nova_220_eyk220f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls nova_230_eyk230f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls nova_106_eyk300f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls modunet300_ey-am300f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls modunet300_ey-am300f002_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls bacnetstac to a higher version than 4.2.1,and avoid the version (,4.2.1]