← CVE Intelligence

CVE-2024-37038

Schneider Electric / Sage 1410 PUBLISHED

Description (CNA)

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.

Affected (CNA)

Vendor / productVersions
Schneider Electric / Sage 1410affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 1430affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 1450affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 2400affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 3030 Magnumaffected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 4400affected Versions C3414-500-S02K5_P8 and prior

CWE

CWE-276

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.