Schneider Electric ION8650 Firmware vulnerabilities

2 CVEs affecting Schneider Electric ION8650 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5985, published 2023-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-5985, published 2023-11-15. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system…
CVE-2023-5984, published 2023-11-15. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could…