Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-37037

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted HTTP request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Sage 1410

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1430

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1450

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 2400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 3030 Magnum

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 4400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

References