ГлавнаяУязвимости → CVE-2024-37036
9.8критическая

CVE-2024-37036

Описание

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.

Затрагиваемое ПО
Schneider-electric Sage rtu firmwareSchneider-electric Sage 1410Schneider-electric Sage 1430Schneider-electric Sage 1450Schneider-electric Sage 2400Schneider-electric Sage 3030 magnumSchneider-electric Sage 4400
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdfhttps://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf