Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-37036

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Sage 1410

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1430

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1450

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 2400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 3030 Magnum

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 4400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

References