6.8
Medium
CVE-2024-10083 CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation…
Description
CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated user with crafted input.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Uni-Telway driver | Versions not published | |
| Uni-Telway driver used in EcoStruxure Control Expert | Versions not published | |
| Uni-Telway driver used in EcoStruxure Process Expert | Versions not published | |
| Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform | Versions not published | |
| Uni-Telway driver used in OPC Factory Server | Versions not published |