9.8
Critical
CVE-2024-37036 CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed…
Description
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sage 1410 | Versions not published | |
| Sage 1430 | Versions not published | |
| Sage 1450 | Versions not published | |
| Sage 2400 | Versions not published | |
| Sage 3030 Magnum | Versions not published | |
| Sage 4400 | Versions not published | |
| sage_4400_firmware | Versions not published |
Other CVEs of Sage 1410
The 6 CVEs of Sage 1410 →
CVE-2024-37040
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow…
5.4
Medium
CVE-2024-37039
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker…
5.9
Medium
CVE-2024-37038
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the…
7.5
High
CVE-2024-37037
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could…
8.1
High