Path traversal in Schneider Electric products - CVE-2024-37037

Vulnerability identifier: #VU107863

CSH Severity: Medium

CVSS v4: 7.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-37037

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. A remote user can send a specially crafted HTTP request to corrupt files and impact device functionality.

Sage 1410
Sage 1430
Sage 1450
Sage 2400
Sage 4400
Sage 3030 Magnum

Install updates from vendor's website.

Sage 1410 - update to C3414-500-S02K5_P9
Sage 1430 - update to C3414-500-S02K5_P9
Sage 1450 - update to C3414-500-S02K5_P9
Sage 2400 - update to C3414-500-S02K5_P9
Sage 4400 - update to C3414-500-S02K5_P9
Sage 3030 Magnum - update to C3414-500-S02K5_P9

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-02

• Multiple vulnerabilities in Schneider Electric Sage Series