VYPR
← All advisories
High severity8.1NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026

CVE-2024-37037

CVE-2024-37037

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted HTTP request.

Affected products

8
  • Schneider Electric/Sage Rtu Firmware
    cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:*
    Range: <c3414-500-s02k5_p9
  • Schneider Electric/SEVD-2024-163-04llm-fuzzy
  • Schneider Electric/Sage 1410cpe-rescue
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 1430v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 1450v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 2400v5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 3030 Magnumv5
    Range: Versions C3414-500-S02K5_P8 and prior
  • Schneider Electric/Sage 4400v5
    Range: Versions C3414-500-S02K5_P8 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.