CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS
Percentile
16.8%
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path
Traversal’) vulnerability exists that could allow an authenticated user with access to the device’s
web interface to corrupt files and impact device functionality when sending a crafted HTTP
request.
Vendor | Product | Version | CPE |
---|---|---|---|
schneider-electric | sage_rtu_firmware | * | cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:* |
schneider-electric | sage_1410 | - | cpe:2.3:h:schneider-electric:sage_1410:-:*:*:*:*:*:*:* |
schneider-electric | sage_1430 | - | cpe:2.3:h:schneider-electric:sage_1430:-:*:*:*:*:*:*:* |
schneider-electric | sage_1450 | - | cpe:2.3:h:schneider-electric:sage_1450:-:*:*:*:*:*:*:* |
schneider-electric | sage_2400 | - | cpe:2.3:h:schneider-electric:sage_2400:-:*:*:*:*:*:*:* |
schneider-electric | sage_3030_magnum | - | cpe:2.3:h:schneider-electric:sage_3030_magnum:-:*:*:*:*:*:*:* |
schneider-electric | sage_4400 | - | cpe:2.3:h:schneider-electric:sage_4400:-:*:*:*:*:*:*:* |