Download of Code Without Integrity Check Vulnerability in Schneider Electric Products

CVE-2023-5984

What is CVE-2023-5984?

A vulnerability exists in Schneider Electric's firmware update process, which allows for the possibility of modified firmware being uploaded due to a lack of integrity checks. This flaw could be exploited during an authorized admin's firmware update procedure, potentially leading to unauthorized modifications and security risks. Users of Schneider Electric products should ensure they follow best practices for firmware updates to mitigate potential threats.

References