CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the
device’s web interface when an attacker sends a specially crafted HTTP request.
References
Link | Resource |
---|---|
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
25 Jul 2024, 19:59
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:schneider-electric:sage_3030_magnum:-:*:*:*:*:*:*:* cpe:2.3:h:schneider-electric:sage_1410:-:*:*:*:*:*:*:* cpe:2.3:h:schneider-electric:sage_1450:-:*:*:*:*:*:*:* cpe:2.3:h:schneider-electric:sage_1430:-:*:*:*:*:*:*:* cpe:2.3:h:schneider-electric:sage_2400:-:*:*:*:*:*:*:* cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:schneider-electric:sage_4400:-:*:*:*:*:*:*:* |
|
References | () https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf - Patch, Vendor Advisory | |
First Time |
Schneider-electric sage 1410
Schneider-electric sage 3030 Magnum Schneider-electric sage Rtu Firmware Schneider-electric sage 1430 Schneider-electric sage 2400 Schneider-electric sage 4400 Schneider-electric Schneider-electric sage 1450 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
13 Jun 2024, 18:36
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
12 Jun 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-12 17:15
Updated : 2024-07-25 19:59
NVD link : CVE-2024-5560
Mitre link : CVE-2024-5560
CVE.ORG link : CVE-2024-5560
JSON object : View
Products Affected
schneider-electric
- sage_3030_magnum
- sage_1430
- sage_1410
- sage_4400
- sage_2400
- sage_1450
- sage_rtu_firmware
CWE
CWE-125
Out-of-bounds Read