CVE:CVE-2023-0052
CNNVD:CNNVD-202301-1115
Sauter AG Controls Nova是瑞士Sauter AG公司的一个智能楼宇自动化系统。
Sauter AG Controls Nova 200-220 Series固件3.3-006及以前版本和BACnetstac 4.2.1及以前版本存在访问控制错误漏洞，该漏洞源于其允许在没有凭证的情况下执行命令。
solution:Upgrade sauter-controls nova_220_eyk220f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls nova_230_eyk230f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls nova_106_eyk300f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls modunet300_ey-am300f001_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]; Upgrade sauter-controls modunet300_ey-am300f002_firmware to a higher version than 3.3-006,and avoid the version (,3.3-006]