Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-37040

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a fault on the device when sending a malformed HTTP request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Sage 1410

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1430

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 1450

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 2400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 3030 Magnum

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

Schneider Electric Sage 4400

Default version status: unaffected

  • Versions C3414-500-S02K5_P8 and prioraffected

References