← CVE Intelligence

CVE-2024-37040

Schneider Electric / Sage 1410 PUBLISHED

Description (CNA)

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a fault on the device when sending a malformed HTTP request.

Affected (CNA)

Vendor / productVersions
Schneider Electric / Sage 1410affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 1430affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 1450affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 2400affected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 3030 Magnumaffected Versions C3414-500-S02K5_P8 and prior
Schneider Electric / Sage 4400affected Versions C3414-500-S02K5_P8 and prior

CWE

CWE-120

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.