CVE-2024-37038: high-severity vulnerability in Schneider Electric Sage 1410
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.4%
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated
user with access to the device’s web interface to perform unauthorized file and firmware
uploads when crafting custom web requests.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Schneider Electric · Sage 1410Schneider Electric · Sage 1430Schneider Electric · Sage 1450Schneider Electric · Sage 2400Schneider Electric · Sage 3030 MagnumSchneider Electric · Sage 4400Related CVEs — Schneider Electric Sage 1410
In the same product, most dangerous first.