{"id":"CVE-2026-102250","revision":"0250e0a1385a43ad926765c00860806c","records":[{"revision":"0250e0a1385a43ad926765c00860806c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-102250","aliases":[],"title":"CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.","description":"CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.","state":0,"publishedAt":"2026-10-13T14:51:48.442+00:00","modifiedAt":"2026-10-13T16:20:06.528+00:00","affected":[{"ecosystem":"Vendor product","name":"Sage RTU 1410","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Schneider Electric\",\n                    \"product\": \"Sage RTU 1410\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version C3414-500-S02L0\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Sage RTU 1430","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Schneider Electric\",\n                    \"product\": \"Sage RTU 1430\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version C3414-500-S02L0\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Sage RTU 1450","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Schneider Electric\",\n                    \"product\": \"Sage RTU 1450\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version C3414-500-S02L0\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Sage RTU 2400","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Schneider Electric\",\n                    \"product\": \"Sage RTU 2400\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version C3414-500-S02L0\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Sage RTU 3030 Magnum","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Schneider Electric\",\n                    \"product\": \"Sage RTU 3030 Magnum\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version C3414-500-S02L0\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Sage RTU 4400","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Schneider Electric\",\n                    \"product\": \"Sage RTU 4400\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"All versions prior to version C3414-500-S02L0\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.6,"severity":"HIGH"}],"references":["https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-286-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-286-02.pdf"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102250","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-102250","identifiers":["CVE-2026-102250"]},"retained":false,"historicalAffected":[]}],"coverage":[]}