7.5
Élevée
CVE-2024-37038 CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the…
Description
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sage 1410 | Versions non publiées | |
| Sage 1430 | Versions non publiées | |
| Sage 1450 | Versions non publiées | |
| Sage 2400 | Versions non publiées | |
| Sage 3030 Magnum | Versions non publiées | |
| Sage 4400 | Versions non publiées | |
| sage_4400 | Versions non publiées | |
| sage_1430 | Versions non publiées | |
| sage_2400 | Versions non publiées |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| sage_3030m | Versions non publiées | |
| sage_1410 | Versions non publiées | |
| sage_1450 | Versions non publiées |
Autres CVE de Sage 1410
Les 6 CVE de Sage 1410 →
CVE-2024-37040
CWE-120: Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability exists that could allow…
5.4
Moyenne
CVE-2024-37039
CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker…
5.9
Moyenne
CVE-2024-37037
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability exists that could…
8.1
Élevée
CVE-2024-37036
CWE-787: Out-of-bounds Write vulnerability exists that could result in an authentication bypass when sending a malformed…
9.8
Critique