CyberzSOC

Applicability
← Back to CVE-2024-37038

CVE-2024-37038

Schneider Electric

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

CVE List v5 (CNA container)
precedence 60 · revised 2024-08-02
6 affected
CVE List v5 (ADP/Vulnrichment)
precedence 55 · revised 2024-08-02
6 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (12)

Product Status Versions Remediation Source
Schneider Electric/Sage 1410 Schneider Electric · Sage 1410 affected Versions C3414-500-S02K5_P8 and prior none available cve_cna
Schneider Electric/Sage 1430 Schneider Electric · Sage 1430 affected Versions C3414-500-S02K5_P8 and prior none available cve_cna
Schneider Electric/Sage 1450 Schneider Electric · Sage 1450 affected Versions C3414-500-S02K5_P8 and prior none available cve_cna
Schneider Electric/Sage 2400 Schneider Electric · Sage 2400 affected Versions C3414-500-S02K5_P8 and prior none available cve_cna
Schneider Electric/Sage 3030 Magnum Schneider Electric · Sage 3030 Magnum affected Versions C3414-500-S02K5_P8 and prior none available cve_cna
Schneider Electric/Sage 4400 Schneider Electric · Sage 4400 affected Versions C3414-500-S02K5_P8 and prior none available cve_cna
schneider_electric/sage_1410 schneider_electric · sage_1410 affected <= c3414-500-s02k5_p8 none available cve_adp
schneider_electric/sage_1430 schneider_electric · sage_1430 affected <= c3414-500-s02k5_p8 none available cve_adp
schneider_electric/sage_1450 schneider_electric · sage_1450 affected <= c3414-500-s02k5_p8 none available cve_adp
schneider_electric/sage_2400 schneider_electric · sage_2400 affected <= c3414-500-s02k5_p8 none available cve_adp
schneider_electric/sage_3030m schneider_electric · sage_3030m affected <= c3414-500-s02k5_p8 none available cve_adp
schneider_electric/sage_4400 schneider_electric · sage_4400 affected <= c3414-500-s02k5_p8 none available cve_adp

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.