Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-37039 EUVD-2024-36406GHSA-2ch9-gmhf-h625

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially cr…

Published Jun 12, 2024 · Updated Aug 2, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Sage 1410 Product: Sage 1430 Product: Sage 1450 Product: Sage 2400 Product: Sage 3030 Magnum Product: Sage 4400 Category: ICS / OT

Description

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the
device when an attacker sends a specially crafted HTTP request.

Affected products

VendorProductAffectedFixed
Schneider Electric Sage 1410 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 1430 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 1450 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 2400 Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 3030 Magnum Versions C3414-500-S02K5_P8 and prior —
Schneider Electric Sage 4400 Versions C3414-500-S02K5_P8 and prior —

Advisories 3

References