CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request.

CWE-252: Unchecked Return Value vulnerability exists that could cause denial of service of the device when an attacker sends a specially crafted HTTP request.

Schneider Electric is aware of multiple vulnerabilities in its SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform. Failure to apply the remediation provided below may risk total compromise of the impacted device, leading to loss of data, loss of operation, or impacts to the performance of the device.

Schneider Electric is aware of multiple vulnerabilities in its SAGE RTU products. The SAGE RTU products are hardware devices that collect utility substation information from different devices and passes it along to a SCADA software platform. Failure to apply the remediation provided below may risk total compromise of the impacted device, leading to loss of data, loss of operation, or impacts to the performance of the device.