High severity8.2NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026
CVE-2023-5629
CVE-2023-5629
Description
A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of information through phishing attempts over HTTP.
Affected products
20- cpe:2.3:o:schneider-electric:eb450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:eb45e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:eh450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:eh45e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:er450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:er45e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:jr240_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:jr900_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:qb150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qb450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qh150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qh450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qp150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qp450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qr150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qr450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
All versions of models ER45e, EB45e, EH45e+ 1 more
- (no CPE)range: All versions of models ER45e, EB45e, EH45e
- (no CPE)range: All Versions
- Schneider Electric/Trio Q-Series Ethernet Data Radiov5Range: Versions prior to 2.7.0
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdVendor Advisory
News mentions
0No linked articles in our index yet.