Medium severity6.5NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026
CVE-2023-5630
CVE-2023-5630
Description
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware.
Affected products
20- cpe:2.3:o:schneider-electric:eb450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:eb45e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:eh450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:eh45e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:er450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:er45e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:jr240_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:jr900_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:qb150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qb450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qh150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qh450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qp150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qp450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qr150_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
- cpe:2.3:o:schneider-electric:qr450_firmware:*:*:*:*:*:*:*:*Range: <2.7.0
All versions+ 1 more
- (no CPE)range: All versions
- (no CPE)range: All Versions
- Schneider Electric/Trio Q-Series Ethernet Data Radiov5Range: All versions
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdVendor Advisory
News mentions
0No linked articles in our index yet.