7.8
Élevée
CVE-2024-5681 CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation,…
Description
CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure Foxboro DCS Core Control Services | Versions non publiées | |
| ecostruxure_foxboro_dcs_core_control_services 9.8 | premières → < 9.8 | 9.8 |