Sage Rtu 3030 Magnum
Monthly
An authenticated attacker with administrative access can upload modified firmware to Schneider Electric SAGE RTU 1410, 1430, 1450, 2400, 3030 Magnum, and 4400 devices because the firmware update procedure does not verify image authenticity, allowing full control over the RTU. The vendor CVSS 4.0 vector rates this High severity at 8.6 with high confidentiality, integrity, and availability impact, but the PR:H prerequisite limits realistic exploitation to insiders, stolen admin credentials, or a compromised engineering workstation with device access. No public exploit identified at time of analysis, and no KEV entry or POC data is present.
An authenticated attacker with administrative access can upload modified firmware to Schneider Electric SAGE RTU 1410, 1430, 1450, 2400, 3030 Magnum, and 4400 devices because the firmware update procedure does not verify image authenticity, allowing full control over the RTU. The vendor CVSS 4.0 vector rates this High severity at 8.6 with high confidentiality, integrity, and availability impact, but the PR:H prerequisite limits realistic exploitation to insiders, stolen admin credentials, or a compromised engineering workstation with device access. No public exploit identified at time of analysis, and no KEV entry or POC data is present.