Description
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric ION8650
Default version status: unaffected
All versionsaffected
Schneider Electric ION8800
Default version status: unaffected
All versionsaffected