CVE-2024-37036

published 2024-06-12

CVE-2024-37036: CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass
when sending a malformed POST request and particular configuration parameters are set.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	sage_rtu_firmware	<= c3414-500-s02k5_p8	—
schneider_electric	sage_1410	—	—
schneider_electric	sage_1430	—	—
schneider_electric	sage_1450	—	—
schneider_electric	sage_2400	—	—
schneider_electric	sage_3030_magnum	—	—
schneider_electric	sage_4400	—	—

CWE-787