CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Sage RTU 1410
Vendor
Schneider Electric
Product
Sage RTU 1410
Platforms
Unknown
Default status
unaffected
Sage RTU 1410 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to version C3414-500-S02L0
affected
Unavailable
Unavailable
Unavailable
None listed
Sage RTU 1430
Vendor
Schneider Electric
Product
Sage RTU 1430
Platforms
Unknown
Default status
unaffected
Sage RTU 1430 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to version C3414-500-S02L0
affected
Unavailable
Unavailable
Unavailable
None listed
Sage RTU 1450
Vendor
Schneider Electric
Product
Sage RTU 1450
Platforms
Unknown
Default status
unaffected
Sage RTU 1450 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to version C3414-500-S02L0
affected
Unavailable
Unavailable
Unavailable
None listed
Sage RTU 2400
Vendor
Schneider Electric
Product
Sage RTU 2400
Platforms
Unknown
Default status
unaffected
Sage RTU 2400 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to version C3414-500-S02L0
affected
Unavailable
Unavailable
Unavailable
None listed
Sage RTU 3030 Magnum
Vendor
Schneider Electric
Product
Sage RTU 3030 Magnum
Platforms
Unknown
Default status
unaffected
Sage RTU 3030 Magnum · Scoped product and version facts