CVE-2024-37040

HIGH

8.1

CVSS Score

Published: June 12, 2024 at 04:56 PM UTC

Updated: June 17, 2026 at 07:37 AM UTC

7 products affected across 1 vendorSage Rtu FirmwareSage 1410Sage 1430

Using Sage 1410 by Schneider Electric?

Get instant alerts when new vulnerabilities affect Sage 1410 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.1

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow a user with access to the device’s web interface to cause a fault on the device when sending a malformed HTTP request.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Sage Rtu Firmware · Schneider Electric

95%

v < c3414-500-s02k5_p9

Affected range stops below c3414-500-s02k5_p9, so it looks safe — our inference, not a vendor statement

schneider-electric-sage-1410 (environment) · schneider-electric-sage-1430 (environment) · schneider-electric-sage-1450 (environment) · schneider-electric-sage-2400 (environment) · schneider-electric-sage-3030-magnum (environment) · schneider-electric-sage-4400 (environment)

Sage 1410 · Schneider Electric

60%

v ≤ 3414-500-S02K5_P8

Sage 1430 · Schneider Electric

60%

v ≤ 3414-500-S02K5_P8

Sage 1450 · Schneider Electric

60%

v ≤ 3414-500-S02K5_P8

Sage 2400 · Schneider Electric

60%

v ≤ 3414-500-S02K5_P8