Lucene search

K
nvd[email protected]NVD:CVE-2023-2569
HistoryJun 14, 2023 - 8:15 a.m.

CVE-2023-2569

2023-06-1408:15:09
CWE-787
web.nvd.nist.gov
cwe-787
foxboro.sys
out-of-bounds write
dos
privilege escalation
ioctl call

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

14.1%

A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service,
elevation of privilege, and potentially kernel execution when a malicious actor with local user
access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Affected configurations

NVD
Node
schneider-electricecostruxure_foxboro_dcs_control_core_servicesMatch-

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

14.1%

Related for NVD:CVE-2023-2569