CVE-2023-5630
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Dec 14, 2023
Updated: Dec 27, 2023
CWE ID 494
Summary
CVE-2023-5630 is a vulnerability classified as CWE-494: Download of Code Without Integrity Check. This issue allows privileged users to install untrusted firmware, potentially leading to serious security consequences. If exploited, an attacker could gain control of the affected system by installing malicious firmware. This vulnerability poses a significant risk and requires immediate attention from system administrators to ensure the integrity of firmware installations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share