Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-5630 EUVD-2023-57923GHSA-wfh4-9jfx-xjhf

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmwar…

Published Dec 14, 2023 · Updated Aug 2, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: Trio E-Series Ethernet Data Radio Product: Trio J-Series Ethernet Data Radio Product: Trio Q-Series Ethernet Data Radio Category: ICS / OT

Description

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a
privileged user to install an untrusted firmware.

Affected products

VendorProductAffectedFixed
Schneider Electric Trio Q-Series Ethernet Data Radio All versions —
Schneider Electric Trio E-Series Ethernet Data Radio All versions —
Schneider Electric Trio J-Series Ethernet Data Radio All Versions —

Advisories 1

References