CVE-2023-5984

Katalog CVE

CVSS 4.9 · Medium EPSS 0,31%

Kerentanan Download of Code Without Integrity Check pada schneider-electric ion8650 firmware, schneider-electric ion8800 firmware. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device.

Rincian

Terbit di NVD

15 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-494: Download of Code Without Integrity Check

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notic... advisory vendor