Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Vulnerabilities fixed in Schneider Electric Sage RTU systems

🗓️ 11 Jun 2024 11:33:48Reported by NCSCType 
ncsc
 ncsc🔗 advisories.ncsc.nl👁 3 Views

Schneider Electric fixed Sage RTU vulnerabilities with firmware updates; risks include denial of service, data manipulation, authentication bypass, and remote code execution.

Related
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability in the web interface of microprogramming software for devices for remote control of lighting and energy consumption from Schneider Electric Sage allows a perpetrator to compromise the integrity of protected information and cause service interruptions.
19 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the web interface of microprogramming software for devices for remote control of lighting and energy consumption in Schneider Electric Sage. This allows a perpetrator to upload arbitrary files and embedded software.
19 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability in the web interface of microprogramming software for devices that control lighting and energy consumption from a distance—Schneider Electric Sage—allows a perpetrator to trigger a service failure.
20 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability in the web interface of microprogramming software for devices that control lighting and energy consumption of Schneider Electric Sage systems allows a perpetrator to trigger a service failure.
20 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage arises from improper verification of the return value of methods or functions. This allows a malicious actor to trigger a service failure.
20 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of microprogramming software in devices for remote control of lighting and energy consumption from Schneider Electric Sage lies in the possibility of writing beyond the buffer in memory, allowing attackers to bypass authentication procedures.
20 Jun 202400:00
–bdu_fstec
Circl		CVE-2024-37036
17 Apr 202510:00
–circl
Circl		CVE-2024-37037
17 Apr 202510:00
–circl
Circl		CVE-2024-37038
17 Apr 202510:00
–circl
Circl		CVE-2024-37039
17 Apr 202510:00
–circl
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Jun 2024 11:33Current
7.9High risk
Vulners AI Score7.9
CVSS 3.19.8
EPSS0.00941
SSVC
sage rtufirmware updatesdenial of servicedata manipulationauthentication bypassremote code executionproduction environment
3