VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 12, 2024· Updated Aug 2, 2024

CVE-2024-37036

CVE-2024-37036

Description

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.

Affected products

6
  • Schneider Electric/Sage 1410cpe-rescue
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 1430v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 1450v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 2400v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 3030 Magnumv5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 4400v5
    Range: Versions C3414-500-S02K5_P8 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.