Skip to content
7.0 High

CVE-2023-2570 A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and…

Description

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver.

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Foxboro DCS Control Core Services Versions not published
The 2 CVEs of EcoStruxure Foxboro DCS Control Core Services →
Track this CVE