Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-102250

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware updat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Sage RTU 1410

Default version status: unaffected

  • All versions prior to version C3414-500-S02L0affected

Schneider Electric Sage RTU 1430

Default version status: unaffected

  • All versions prior to version C3414-500-S02L0affected

Schneider Electric Sage RTU 1450

Default version status: unaffected

  • All versions prior to version C3414-500-S02L0affected

Schneider Electric Sage RTU 2400

Default version status: unaffected

  • All versions prior to version C3414-500-S02L0affected

Schneider Electric Sage RTU 3030 Magnum

Default version status: unaffected

  • All versions prior to version C3414-500-S02L0affected

Schneider Electric Sage RTU 4400

Default version status: unaffected

  • All versions prior to version C3414-500-S02L0affected

References