Lucene search
SchneiderCVELIST:CVE-2024-5681HistoryJul 11, 2024 - 8:27 a.m.
CVE-2024-5681
2024-07-1108:27:49
CWE-20
schneider
www.cve.org
11
cve-2024-5681
improper input validation
foxboro.sys
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.1%
CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service,
privilege escalation, and potentially kernel execution when a malicious actor with local user
access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "EcoStruxure Foxboro DCS Core Control Services",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "Versions 9.8 and prior"
}
]
}
]Related
cve
cve
CVE-2024-5681
2024-07-11 09:15:04
vulnrichment
vulnrichment
CVE-2024-5681
2024-07-11 08:27:49
nvd
nvd
CVE-2024-5681
2024-07-11 09:15:04
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.1%
Related for CVELIST:CVE-2024-5681