Skip to content
OpenAdvisories
High · 7.2 CVE-2023-5984 EUVD-2023-58251GHSA-mvpw-qwpm-m23m

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorize…

Published Nov 15, 2023 · Updated Sep 30, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: ION8650 Product: ION8800 Category: ICS / OT

Description

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow
modified firmware to be uploaded when an authorized admin user begins a firmware update
procedure which could result in full control over the device.

Affected products

VendorProductAffectedFixed
Schneider Electric ION8650 All versions —
Schneider Electric ION8800 All versions —

Advisories 1

References