← voltar
CVE-2024-37038

CVE-2024-37038

CVSS 7.5 HIGHEPSS 0.4%CWE-276
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Schneider Electric · Sage 1410Schneider Electric · Sage 1430Schneider Electric · Sage 1450Schneider Electric · Sage 2400Schneider Electric · Sage 3030 MagnumSchneider Electric · Sage 4400

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf