Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
下载代码缺少完整性检查
Vulnerability Title
Schneider Electric ION8650和ION8800 安全漏洞
Vulnerability Description
Schneider Electric ION8650和Schneider Electric ION8800都是法国施耐德电气(Schneider Electric)公司的用于公用网络监控的下一代插座和配电盘仪表。 Schneider Electric ION8650和ION8800存在安全漏洞,该漏洞源于存在没有完整性检查的代码下载漏洞,可能允许上传修改后的固件。
CVSS Information
N/A
Vulnerability Type
N/A