CVE-2023-5630

🗓️ 14 Dec 2023 04:49:38Reported by schneiderType

CWE-494: Download of Code Without Integrity Check vulnerability in firmware installation

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the microprogrammed Ethernet receiver software from the Trio Q, Trio E, and Trio J series lies in the fact that code can be loaded without any checks for its integrity. This allows a hacker to inject additional code into the device’s firmware.	19 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-5630	10 Jan 202416:41	–	circl
CNNVD	Schneider Electric Trio Q-Series Ethernet Data Radio Security Vulnerability	14 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-5630	14 Dec 202304:49	–	cvelist
EUVD	EUVD-2023-57923	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5630	14 Dec 202305:15	–	nvd
OSV	CVE-2023-5630	14 Dec 202305:15	–	osv
Prion	Design/Logic Flaw	14 Dec 202305:15	–	prion
RedhatCVE	CVE-2023-5630	23 May 202505:07	–	redhatcve

NVD

Node

schneider-electric eb450_firmwareMatch-

AND

schneider-electric eb450Match-

Node

schneider-electric eb45e_firmwareMatch-

AND

schneider-electric eb45eMatch-

Node

schneider-electric eh450_firmwareMatch-

AND

schneider-electric eh450Match-

Node

schneider-electric eh45e_firmwareMatch-

AND

schneider-electric eh45eMatch-

Node

schneider-electric er450_firmwareMatch-

AND

schneider-electric er450Match-

Node

schneider-electric er45e_firmwareMatch-

AND

schneider-electric er45eMatch-

Node

schneider-electric jr240_firmwareMatch-

AND

schneider-electric jr240Match-

Node

schneider-electric jr900_firmwareMatch-

AND

schneider-electric jr900Match-

Node

schneider-electric qr450_firmwareRange<2.7.0

AND

schneider-electric qr450Match-

Node

schneider-electric qr150_firmwareRange<2.7.0

AND

schneider-electric qr150Match-

Node

schneider-electric qb450_firmwareRange<2.7.0

AND

schneider-electric qb450Match-

Node

schneider-electric qb150_firmwareRange<2.7.0

AND

schneider-electric qb150Match-

Node

schneider-electric qp450_firmwareRange<2.7.0

AND

schneider-electric qp450Match-

Node

schneider-electric qp150_firmwareRange<2.7.0

AND

schneider-electric qp150Match-

Node

schneider-electric qh450_firmwareRange<2.7.0

AND

schneider-electric qh450Match-

Node

schneider-electric qh150_firmwareRange<2.7.0

AND

schneider-electric qh150Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Trio Q-Series Ethernet Data Radio",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Trio E-Series Ethernet Data Radio",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Trio J-Series Ethernet Data Radio",
    "vendor": "Schneider Electric",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

17 Jun 2026 06:48Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.9 - 6.5

EPSS0.00282

CWE-494