CWE-345 (Insufficient Verification of Data Authenticity)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Schneider Electric
Sage RTU 1410
Schneider Electric
Sage RTU 1430
Schneider Electric
Sage RTU 1450
Schneider Electric
Sage RTU 2400
Schneider Electric
Sage RTU 3030 Magnum
Schneider Electric
Sage RTU 4400
Subsystems
General OT
Sectors
Multiple
What to Know
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
What to Do
Monitor Schneider Electric's web page for any future patch releases.