CVE-2024-5681
CVE-2024-5681
CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service,
privilege escalation, and potentially kernel execution when a malicious actor with local user
access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Schneider Electric · EcoStruxure Foxboro DCS Core Control Services¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →