Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-37038

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Sage 1410

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1430

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1450

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 2400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 3030 Magnum

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 4400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

References