Vulnerability Details CVE-2024-37038
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated
user with access to the device’s web interface to perform unauthorized file and firmware
uploads when crafting custom web requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.8%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2024-37038
-
cpe:2.3:h:schneider-electric:sage_1410:-
-
cpe:2.3:h:schneider-electric:sage_1430:-
-
cpe:2.3:h:schneider-electric:sage_1450:-
-
cpe:2.3:h:schneider-electric:sage_2400:-
-
cpe:2.3:h:schneider-electric:sage_3030_magnum:-
-
cpe:2.3:h:schneider-electric:sage_4400:-
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:-
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3413-500-001f0_pb
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3413-500-001f0_pc
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-001g3_p6
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02j1
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02j1_p1
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02j2
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k0
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k0_p1
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k0_p2
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k0_p3
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k0_p4
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k2
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k2_p1
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k2_p2
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k2_p3
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k2_p4
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k3
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k4
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k4_p1
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k4_p2
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k4_p3
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k4_p4
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p1
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p2
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p3
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p4
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p5
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p6
-
cpe:2.3:o:schneider-electric:sage_rtu_firmware:c3414-500-s02k5_p8