CVE-2023-5630: Schneider Electric EB450 Firmware

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware.

Affected products

• Schneider Electric EB450 Firmware: affected versions not specified
• Schneider Electric EB45E Firmware: affected versions not specified
• Schneider Electric EH450 Firmware: affected versions not specified
• Schneider Electric EH45E Firmware: affected versions not specified
• Schneider Electric ER450 Firmware: affected versions not specified
• Schneider Electric ER45E Firmware: affected versions not specified
• Schneider Electric JR240 Firmware: affected versions not specified
• Schneider Electric JR900 Firmware: affected versions not specified
• Schneider Electric QB150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QB450 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QH150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QH450 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QP150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QP450 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QR150 Firmware: before 2.7.0 (fixed in 2.7.0)
• Schneider Electric QR450 Firmware: before 2.7.0 (fixed in 2.7.0)

Published 2023-12-14. Last modified 2026-06-17.