VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026

CVE-2024-37036

CVE-2024-37036

Description

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.

Affected products

7
  • Schneider Electric/Sage Rtu Firmware
    cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:*
    Range: <=c3414-500-s02k5_p8
  • Schneider Electric/Sage 1410cpe-rescue
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 1430v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 1450v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 2400v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 3030 Magnumv5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 4400v5
    Range: Versions C3414-500-S02K5_P8 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.