Description
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Sage RTU 1410 | All versions prior to version C3414-500-S02L0 | — |
| Schneider Electric | Sage RTU 1430 | All versions prior to version C3414-500-S02L0 | — |
| Schneider Electric | Sage RTU 1450 | All versions prior to version C3414-500-S02L0 | — |
| Schneider Electric | Sage RTU 2400 | All versions prior to version C3414-500-S02L0 | — |
| Schneider Electric | Sage RTU 3030 Magnum | All versions prior to version C3414-500-S02L0 | — |
| Schneider Electric | Sage RTU 4400 | All versions prior to version C3414-500-S02L0 | — |
Advisories 1
- SEVD-2026-286-02 SAGE RTU Schneider Electric CPCERT · Oct 13, 2026