CVE-2023-5630



A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a
privileged user to install an untrusted firmware.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
schneiderCNA
6.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
VendorProductVersion
schneider-electriceb450_firmware
-
schneider-electriceb45e_firmware
-
schneider-electriceh450_firmware
-
schneider-electriceh45e_firmware
-
schneider-electricer450_firmware
-
schneider-electricer45e_firmware
-
schneider-electricjr240_firmware
-
schneider-electricjr900_firmware
-
schneider-electricqr450_firmware
𝑥
< 2.7.0
schneider-electricqr150_firmware
𝑥
< 2.7.0
schneider-electricqb450_firmware
𝑥
< 2.7.0
schneider-electricqb150_firmware
𝑥
< 2.7.0
schneider-electricqp450_firmware
𝑥
< 2.7.0
schneider-electricqp150_firmware
𝑥
< 2.7.0
schneider-electricqh450_firmware
𝑥
< 2.7.0
schneider-electricqh150_firmware
𝑥
< 2.7.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-346-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-346-01.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-346-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-346-01.pdf