7.5
High
CVE-2024-37038 CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the…
Description
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sage 1410 | Versions not published | |
| Sage 1430 | Versions not published | |
| Sage 1450 | Versions not published | |
| Sage 2400 | Versions not published | |
| Sage 3030 Magnum | Versions not published | |
| Sage 4400 | Versions not published | |
| sage_4400 | Versions not published | |
| sage_1430 | Versions not published | |
| sage_2400 | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| sage_3030m | Versions not published | |
| sage_1410 | Versions not published | |
| sage_1450 | Versions not published |
Other CVEs of Sage 1410
The 6 CVEs of Sage 1410 →
CVE-2024-37040
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow…
5.4
Medium
CVE-2024-37039
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker…
5.9
Medium
CVE-2024-37037
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could…
8.1
High
CVE-2024-37036
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed…
9.8
Critical