Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-37036 EUVD-2024-36403GHSA-q5cc-c5xp-qh6h

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and p…

Published Jun 12, 2024 · Updated Aug 2, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Sage 1410 Product: Sage 1430 Product: Sage 1450 Product: Sage 2400 Product: Sage 3030 Magnum Product: Sage 4400 Category: ICS / OT

Description

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass
when sending a malformed POST request and particular configuration parameters are set.

Affected products

VendorProductAffectedFixed
Schneider Electric Sage 1410 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 1430 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 1450 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 2400 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 3030 Magnum Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 4400 Versions C3414-500-S02K5_P8 and prior —

Advisories 3

References