Skip to content
OpenAdvisories
High · 8.1 CVE-2025-1058 EUVD-2025-1981GHSA-fc88-98gm-v572

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is d…

Published Feb 13, 2025 · Updated Feb 13, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: ASCO 5310 Single-Channel Remote Annunciator Product: ASCO 5350 Eight Channel Remote Annunciator Category: ICS / OT

Description

CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device
inoperable when malicious firmware is downloaded.

Affected products

VendorProductAffectedFixed
Schneider Electric ASCO 5310 Single-Channel Remote Annunciator All versions —
Schneider Electric ASCO 5350 Eight Channel Remote Annunciator All versions —

Advisories 3

References