CVE-2024-37036 | Schneider Electric Sage 4400 up to C3414-500-S02K5_P8 POST Request out-of-bounds write (SEVD-2024-163-05)

A vulnerability was found in Schneider Electric Sage 1410, Sage 1430, Sage 1450, Sage 2400, Sage 3030 Magnum and Sage 4400 up to C3414-500-S02K5_P8 and classified as very critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation leads to out-of-bounds write.

This vulnerability is handled as CVE-2024-37036. The attack may be launched remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.