Sage Rtu Firmware
CVE-2024-37039
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request.
AnalysisAI
device when an attacker sends a specially crafted HTTP request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-252. device when an attacker sends a specially crafted HTTP request. Affected products include: Schneider-Electric Sage Rtu Firmware.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Sage Rtu Firmware
View allwhen sending a malformed POST request and particular configuration parameters are set. Rated critical severity (CVSS 9.8
user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom we
exists that could allow a user with access to the device’s web interface to cause a fault on the device when sending a m
Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s web interface to cor
device’s web interface when an attacker sends a specially crafted HTTP request. Rated high severity (CVSS 7.5), this vul
Same weakness CWE-252 – Unchecked Return Value
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today