CVE-2024-5560

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the
device’s web interface when an attacker sends a specially crafted HTTP request.

CWE-125: Existe una vulnerabilidad de lectura fuera de los límites que podría causar denegación de servicio de la interfaz web del dispositivo cuando un atacante envía una solicitud HTTP especialmente manipulada.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-05-31 CVE Reserved
2024-06-12 CVE Published
2024-07-26 EPSS Updated
2024-08-01 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-125: Out-of-bounds Read

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf	2024-07-25

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Schneider-electric Search vendor "Schneider-electric"	Sage Rtu Firmware Search vendor "Schneider-electric" for product "Sage Rtu Firmware"	< c3414-500-s02k5_p9 Search vendor "Schneider-electric" for product "Sage Rtu Firmware" and version " < c3414-500-s02k5_p9"	-	Affected	in	Schneider-electric Search vendor "Schneider-electric"	Sage 1410 Search vendor "Schneider-electric" for product "Sage 1410"	-	-	Safe
Schneider-electric Search vendor "Schneider-electric"	Sage Rtu Firmware Search vendor "Schneider-electric" for product "Sage Rtu Firmware"	< c3414-500-s02k5_p9 Search vendor "Schneider-electric" for product "Sage Rtu Firmware" and version " < c3414-500-s02k5_p9"	-	Affected	in	Schneider-electric Search vendor "Schneider-electric"	Sage 1430 Search vendor "Schneider-electric" for product "Sage 1430"	-	-	Safe
Schneider-electric Search vendor "Schneider-electric"	Sage Rtu Firmware Search vendor "Schneider-electric" for product "Sage Rtu Firmware"	< c3414-500-s02k5_p9 Search vendor "Schneider-electric" for product "Sage Rtu Firmware" and version " < c3414-500-s02k5_p9"	-	Affected	in	Schneider-electric Search vendor "Schneider-electric"	Sage 1450 Search vendor "Schneider-electric" for product "Sage 1450"	-	-	Safe
Schneider-electric Search vendor "Schneider-electric"	Sage Rtu Firmware Search vendor "Schneider-electric" for product "Sage Rtu Firmware"	< c3414-500-s02k5_p9 Search vendor "Schneider-electric" for product "Sage Rtu Firmware" and version " < c3414-500-s02k5_p9"	-	Affected	in	Schneider-electric Search vendor "Schneider-electric"	Sage 2400 Search vendor "Schneider-electric" for product "Sage 2400"	-	-	Safe
Schneider-electric Search vendor "Schneider-electric"	Sage Rtu Firmware Search vendor "Schneider-electric" for product "Sage Rtu Firmware"	< c3414-500-s02k5_p9 Search vendor "Schneider-electric" for product "Sage Rtu Firmware" and version " < c3414-500-s02k5_p9"	-	Affected	in	Schneider-electric Search vendor "Schneider-electric"	Sage 3030 Magnum Search vendor "Schneider-electric" for product "Sage 3030 Magnum"	-	-	Safe
Schneider-electric Search vendor "Schneider-electric"	Sage Rtu Firmware Search vendor "Schneider-electric" for product "Sage Rtu Firmware"	< c3414-500-s02k5_p9 Search vendor "Schneider-electric" for product "Sage Rtu Firmware" and version " < c3414-500-s02k5_p9"	-	Affected	in	Schneider-electric Search vendor "Schneider-electric"	Sage 4400 Search vendor "Schneider-electric" for product "Sage 4400"	-	-	Safe