← CVE Intelligence

CVE-2024-37037

Schneider Electric / Sage 1410 PUBLISHED

Description (CNA)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted HTTP request.

Affected (CNA)

Vendor / productVersions
Schneider Electric / Sage 1410affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 1430affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 1450affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 2400affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 3030 Magnumaffected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 4400affected Versions C3414-500-S02K5_P8 and prior

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.