CVE-2024-5560

CVE-2024-5560

CVSS 5.3 MEDIUMEPSS 0.9%CWE-125

CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HTTP request.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Produtos afetados

Schneider Electric · Sage 1410 Schneider Electric · Sage 1430 Schneider Electric · Sage 1450 Schneider Electric · Sage 2400 Schneider Electric · Sage 3030 Magnum Schneider Electric · Sage 4400

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf