Medium severity5.3NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026
CVE-2024-5560
CVE-2024-5560
Description
CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HTTP request.
Affected products
7- cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:*Range: <c3414-500-s02k5_p9
- Range: Versions C3414-500-S02K5_P8 and prior
- Schneider Electric/Sage 1430v5Range: Versions C3414-500-S02K5_P8 and prior
- Schneider Electric/Sage 1450v5Range: Versions C3414-500-S02K5_P8 and prior
- Schneider Electric/Sage 2400v5Range: Versions C3414-500-S02K5_P8 and prior
- Schneider Electric/Sage 3030 Magnumv5Range: Versions C3414-500-S02K5_P8 and prior
- Schneider Electric/Sage 4400v5Range: Versions C3414-500-S02K5_P8 and prior
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.