Ion8650 Firmware Security Vulnerabilities

CVE-2023-5984

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allowmodified firmware to be uploaded when an authorized admin user begins a firmware updateprocedure which could result in full control over the device.

CVE-2023-5985

A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerabilityexists that could cause compromise of a user’s browser when an attacker with admin privilegeshas modified system values.