CVE-2023-5984 (published 2023-11-15T03:30:09.897Z)

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow
modified firmware to be uploaded when an authorized admin user begins a firmware update
procedure which could result in full control over the device.


Affected products: Vendor: Schneider Electric
Product: ION8650
Versions: All versions