Vulnerability CVE-2024-37038
Published: 2024-06-12

Description:
CWE-276: Incorrect Default Permissions vulnerability exists that could allow an authenticated
user with access to the device??s web interface to perform unauthorized file and firmware
uploads when crafting custom web requests.

 References:
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-163-05.pdf
Copyright 2026, cxsecurity.com

 

Back to Top