Login Request a demo
SR
Product
Sage Rtu Firmware
by Schneider-electric · last CVE Jun 12, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 5Medium 0Low 0
Severity
All severities6Critical1High5Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sage Rtu Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37036
9.8
1%
Jun 12
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are…
Affected: through c3414-500-s02k5_p8
CVE-2024-37038
8.8
0%
Jun 12
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and…
Affected: before c3414-500-s02k5_p9
CVE-2024-37040
8.1
0%
Jun 12
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a…
Affected: before c3414-500-s02k5_p9
CVE-2024-37037
8.1
1%
Jun 12
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web…
Affected: before c3414-500-s02k5_p9
CVE-2024-5560
7.5
1%
Jun 12
CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HTTP request
Affected: before c3414-500-s02k5_p9
CVE-2024-37039
7.5
1%
Jun 12
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request
Affected: before c3414-500-s02k5_p9
Showing 6