Open Redirect Vulnerability in Schneider Electric’s Products
CVE-2023-5629
8.2HIGH
Key Information:
- Vendor
Schneider Electric
- Status
- Vendor
- CVE Published:
- 14 December 2023
What is CVE-2023-5629?
A vulnerability related to open redirect has been identified in certain products by Schneider Electric, potentially allowing attackers to redirect users to untrusted sites. This could facilitate phishing attacks and lead to the unauthorized disclosure of sensitive information. Users are advised to review security notices and implement necessary safeguards to protect against such threats.
Affected Version(s)
Trio E-Series Ethernet Data Radio All versions of models ER45e, EB45e, EH45e
Trio J-Series Ethernet Data Radio All Versions
Trio Q-Series Ethernet Data Radio Versions prior to 2.7.0