CVE-2023-5984

CVSS V2 None CVSS V3 None
Description
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device.
Overview
  • CVE ID
  • CVE-2023-5984
  • Assigner
  • schneider
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-15T03:30:09.897Z
  • Last Modified Date
  • 2023-12-14T05:04:52.005Z
Weakness Enumerations
CWE URL
CWE-494 http://cwe.mitre.org/data/definitions/494.html
References
Reference URL Reference Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-5984
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5984
History
Created Old Value New Value Data Type Notes
2024-06-25 05:14:51 Added to TrackCVE