CVE-2024-37036

An attacker sends a specially crafted HTTP POST request with an incorrect structure to the device (malformed POST request). In combination with specific device configuration, this causes data to be written outside the intended memory area (out-of-bounds write), which leads to bypassing the authentication process. The vulnerability is accessible over the network without requiring any credentials.

A successful exploit allows an attacker to bypass authentication and gain unauthorized access to the device, which in industrial environments (OT/ICS) can lead to violations of confidentiality, integrity, and availability of controlled systems.

Security patches available from the manufacturer should be applied in accordance with the references — Schneider Electric security bulletin SEVD-2024-163-05 available at the address indicated in the references. Additionally, it is recommended to verify and restrict the configuration of vulnerable parameters and isolate RTU devices from external networks.

Schneider Electric Sage RTU Firmware and devices: Sage 1410, Sage 1430, Sage 1450, Sage 2400 — specific firmware versions indicated in the manufacturer's references (SEVD-2024-163-05)