CVE-2024-37038
Estado: ModificadaAlta (8.8)—
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated user with access to the device’s web interface to perform unauthorized file and firmware uploads when crafting custom web requests.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.37%
- Percentil entre todas las CVEs puntuadas: 29
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-276
- CWE-276
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-37038",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-37038",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-06-12T17:44:53.062764Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cybersecurity@se.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.6
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "cybersecurity@se.com",
"affectedData": [
{
"vendor": "Schneider Electric",
"product": "Sage 1410",
"versions": [
{
"status": "affected",
"version": "Versions C3414-500-S02K5_P8 and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Sage 1430",
"versions": [
{
"status": "affected",
"version": "Versions C3414-500-S02K5_P8 and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Sage 1450",
"versions": [
{
"status": "affected",
"version": "Versions C3414-500-S02K5_P8 and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Sage 2400",
"versions": [
{
"status": "affected",
"version": "Versions C3414-500-S02K5_P8 and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Sage 3030 Magnum",
"versions": [
{
"status": "affected",
"version": "Versions C3414-500-S02K5_P8 and prior"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Schneider Electric",
"product": "Sage 4400",
"versions": [
{
"status": "affected",
"version": "Versions C3414-500-S02K5_P8 and prior"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:h:schneider_electric:sage_4400:*:*:*:*:*:*:*:*"
],
"vendor": "schneider_electric",
"product": "sage_4400",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "c3414-500-s02k5_p8"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:schneider_electric:sage_1430:*:*:*:*:*:*:*:*"
],
"vendor": "schneider_electric",
"product": "sage_1430",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "c3414-500-s02k5_p8"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:schneider_electric:sage_2400:*:*:*:*:*:*:*:*"
],
"vendor": "schneider_electric",
"product": "sage_2400",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "c3414-500-s02k5_p8"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:schneider_electric:sage_3030m:*:*:*:*:*:*:*:*"
],
"vendor": "schneider_electric",
"product": "sage_3030m",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "c3414-500-s02k5_p8"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:schneider_electric:sage_1410:*:*:*:*:*:*:*:*"
],
"vendor": "schneider_electric",
"product": "sage_1410",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "c3414-500-s02k5_p8"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:h:schneider_electric:sage_1450:*:*:*:*:*:*:*:*"
],
"vendor": "schneider_electric",
"product": "sage_1450",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "c3414-500-s02k5_p8"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2024-06-12T17:15:51.080",
"references": [
{
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cybersecurity@se.com"
},
{
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "cybersecurity@se.com",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated\nuser with access to the device’s web interface to perform unauthorized file and firmware\nuploads when crafting custom web requests."
},
{
"lang": "es",
"value": "CWE-276: Existe una vulnerabilidad de permisos predeterminados incorrectos que podría permitir que un usuario autenticado con acceso a la interfaz web del dispositivo realice cargas de archivos y firmware no autorizadas al crear solicitudes web personalizadas."
}
],
"lastModified": "2026-06-17T07:37:39.013",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:schneider-electric:sage_rtu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4DDD3DD-576C-404E-A132-D1357936A610",
"versionEndExcluding": "c3414-500-s02k5_p9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:sage_1410:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02E606BD-92F8-4396-AD13-666D76E1E34D"
},
{
"criteria": "cpe:2.3:h:schneider-electric:sage_1430:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "97E29CCC-4E21-411E-80DD-545A66E9B042"
},
{
"criteria": "cpe:2.3:h:schneider-electric:sage_1450:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "66759867-027F-4FA6-ABA6-BFDEE49E8F8D"
},
{
"criteria": "cpe:2.3:h:schneider-electric:sage_2400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AA561E2A-4787-48D7-ABBB-26D0D7D24E6F"
},
{
"criteria": "cpe:2.3:h:schneider-electric:sage_3030_magnum:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "453696F2-0F4C-4000-A438-F814D0FC3504"
},
{
"criteria": "cpe:2.3:h:schneider-electric:sage_4400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6462B366-8F9F-49D6-939A-E73C1D5A707C"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cybersecurity@se.com"
}