CVE-2024-37036: Critical severity schneider-electric sage rtu firmware vulnerability
Published Jun 12, 2024
·Updated
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.
Affected Software
7 affected components
All of the following
Schneider-electric Sage Rtu Firmware<=c3414-500-s02k5_p8
Any of the following
Schneider-electric Sage 1410
Schneider-electric Sage 1430
Schneider-electric Sage 1450
Schneider-electric Sage 2400
Schneider-electric Sage 3030 Magnum
Schneider-electric Sage 4400
Event History
Jun 12, 2024
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-37036?
CVE-2024-37036 has a moderate severity level as it can lead to an authentication bypass.
2
How do I fix CVE-2024-37036?
To fix CVE-2024-37036, update the affected Schneider Electric Sage RTU firmware to a version released after c3414-500-s02k5_p8.
3
Which products are affected by CVE-2024-37036?
CVE-2024-37036 affects Schneider Electric Sage RTU firmware versions up to c3414-500-s02k5_p8.
4
What causes CVE-2024-37036?
CVE-2024-37036 is caused by an out-of-bounds write vulnerability that can be exploited with malformed POST requests.
5
Is there any workaround for CVE-2024-37036?
Currently, a workaround for CVE-2024-37036 is not specified; updating the firmware is the recommended action.