CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially crafted HTTP request.
CWE-125: Existe una vulnerabilidad de lectura fuera de los límites que podría causar denegación de servicio de la interfaz web del dispositivo cuando un atacante envía una solicitud HTTP especialmente manipulada.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-125
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | sage_rtu_firmware | * | <built-in method update of dict object at 0x7e61114e3240> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:schneider-electric:sage_1410:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:sage_1430:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:sage_1450:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:sage_2400:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:sage_3030_magnum:-:*:*:*:*:*:*:* |
| No | cpe:2.3:h:schneider-electric:sage_4400:-:*:*:*:*:*:*:* |