8.6
High
CVE-2026-102250 CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be…
Description
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sage RTU 1410 | Versions not published | |
| Sage RTU 1430 | Versions not published | |
| Sage RTU 1450 | Versions not published | |
| Sage RTU 2400 | Versions not published | |
| Sage RTU 3030 Magnum | Versions not published | |
| Sage RTU 4400 | Versions not published |