Critical ICSA-25-107-02 6 CVEs

Schneider Electric Sage Series

Published Jun 11, 2024 · Updated Jul 9, 2024 · Revision 3

Vendor: Schneider Electric Product: Sage 1410 Product: Sage 1430 Product: Sage 1450 Product: Sage 2400 Product: Sage 3030 Magnum Product: Sage 4400

Summary

Schneider Electric is aware of multiple vulnerabilities in its SAGE RTU products.
The SAGE RTU products are hardware devices that collect utility substation information from
different devices and passes it along to a SCADA software platform.
Failure to apply the remediation provided below may risk total compromise of the impacted
device, leading to loss of data, loss of operation, or impacts to the performance of the device.

Vulnerabilities 6

Critical 9.8

CVE-2024-37036

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malforme…

Schneider Electric Sage 4400 Sage 1410 Sage 1450 ICS / OT

Jun 12, 2024
High 8.1

CVE-2024-37037

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could …

Schneider Electric Sage 3030 Magnum Sage 1430 Sage 2400 ICS / OT

Jun 12, 2024
High 7.5

CVE-2024-37038

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the d…

Schneider Electric Sage 4400 Sage 1410 Sage 1450 ICS / OT

Jun 12, 2024
Medium 5.9

CVE-2024-37039

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker …

Schneider Electric Sage 4400 Sage 1410 Sage 1450 ICS / OT

Jun 12, 2024
Medium 5.4

CVE-2024-37040

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a…

Schneider Electric Sage 3030 Magnum Sage 1430 Sage 2400 ICS / OT

Jun 12, 2024
Medium 5.3

CVE-2024-5560

CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when …

Schneider Electric Sage 3030 Magnum Sage 1430 Sage 2400 ICS / OT

Jun 12, 2024

Revision history

2024-07-09 #2.0.0
A direct link is now available to the remediation.
2024-06-11 #1.0.0
Original Release
2024-06-11 #1.1.0
Mitigations were provided to address this vulnerability. Also, there was an update to the affected product version.

References

SAGE RTU - SEVD-2024-163-05 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2024-163-05.pdf
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/
ICS Advisory ICSA-25-107-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B