7.1
High
CVE-2024-5680 CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a…
Description
CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Foxboro DCS Core Control Services | Versions not published |