← back
CVE-2024-37037

CVE-2024-37037

CVSS 8.1 HIGHEPSS 1.0%CWE-22
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted HTTP request.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected products
Schneider Electric · Sage 1410Schneider Electric · Sage 1430Schneider Electric · Sage 1450Schneider Electric · Sage 2400Schneider Electric · Sage 3030 MagnumSchneider Electric · Sage 4400

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf