Vulnerability in Schneider Electric Sage Rtu 1410
CVE-2026-102250
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Schneider Electric Sage Rtu 1410 — versions All versions prior to version C3414-500-S02L0
- Schneider Electric Sage Rtu 1430 — versions All versions prior to version C3414-500-S02L0
- Schneider Electric Sage Rtu 1450 — versions All versions prior to version C3414-500-S02L0
- Schneider Electric Sage Rtu 2400 — versions All versions prior to version C3414-500-S02L0
- Schneider Electric Sage Rtu 3030 Magnum — versions All versions prior to version C3414-500-S02L0
- Schneider Electric Sage Rtu 4400 — versions All versions prior to version C3414-500-S02L0