9.8
Critique
CVE-2024-37036 CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed…
Description
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed POST request and particular configuration parameters are set.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sage 1410 | Versions non publiées | |
| Sage 1430 | Versions non publiées | |
| Sage 1450 | Versions non publiées | |
| Sage 2400 | Versions non publiées | |
| Sage 3030 Magnum | Versions non publiées | |
| Sage 4400 | Versions non publiées | |
| sage_4400_firmware | Versions non publiées |
Autres CVE de Sage 1410
Les 6 CVE de Sage 1410 →
CVE-2024-37040
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow…
5.4
Moyenne
CVE-2024-37039
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker…
5.9
Moyenne
CVE-2024-37038
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the…
7.5
Élevée
CVE-2024-37037
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could…
8.1
Élevée