CVE-2023-5629: Schneider Electric EB450 Firmware

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A CWE-601:URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability exists that could cause disclosure of information through phishing attempts over HTTP.

Affected products

• Schneider Electric EB450 Firmware: affected versions not specified
• Schneider Electric EB45E Firmware: affected versions not specified
• Schneider Electric EH450 Firmware: affected versions not specified
• Schneider Electric EH45E Firmware: affected versions not specified
• Schneider Electric ER450 Firmware: affected versions not specified
• Schneider Electric ER45E Firmware: affected versions not specified
• Schneider Electric JR240 Firmware: affected versions not specified
• Schneider Electric JR900 Firmware: affected versions not specified
• Schneider Electric QB150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QB450 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QH150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QH450 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QP150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QP450 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QR150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QR450 Firmware: before 2.7.0 (fixed in 2.7.0)

Published 2023-12-14. Last modified 2026-06-17.