NetSight
IP …
high7.8

CVE-2024-5681

CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a …

Impact

CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Affected products

VendorProductAffected versions
Schneider-ElectricEcostruxure Foxboro Dcs Control Core Services
through 9.8

Weakness classification

CWE-20

References