CVE-2024-37040: Buffer Overflow
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a fault on the device when sending a malformed HTTP request.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37040?
CVE-2024-37040 is classified as a critical vulnerability due to its potential to cause device faults.
How can I mitigate CVE-2024-37040?
To mitigate CVE-2024-37040, it is recommended to restrict access to the device’s web interface and apply any available firmware updates.
Which devices are affected by CVE-2024-37040?
CVE-2024-37040 affects the Schneider Electric Sage RTU firmware versions prior to c3414-500-s02k5_p9.
What type of vulnerability is CVE-2024-37040?
CVE-2024-37040 is a classic buffer overflow vulnerability that occurs due to improper size checks on input.
What could happen if CVE-2024-37040 is exploited?
Exploitation of CVE-2024-37040 could allow an attacker to send a malformed HTTP request, causing a fault in the device.