medium6.5
CVE-2023-5630
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware.
Impact
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Eb450 Firmware | All versions |
| Schneider-Electric | Eb45e Firmware | All versions |
| Schneider-Electric | Eh450 Firmware | All versions |
| Schneider-Electric | Eh45e Firmware | All versions |
| Schneider-Electric | Er450 Firmware | All versions |
| Schneider-Electric | Er45e Firmware | All versions |
| Schneider-Electric | Jr240 Firmware | All versions |
| Schneider-Electric | Jr900 Firmware | All versions |
| Schneider-Electric | Qr450 Firmware | before 2.7.0 |
| Schneider-Electric | Qr150 Firmware | before 2.7.0 |
| Schneider-Electric | Qb450 Firmware | before 2.7.0 |
| Schneider-Electric | Qb150 Firmware | before 2.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-346-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-346-01.pdf
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-346-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-346-01.pdf