Lucene search
HistoryJul 11, 2024 - 9:15 a.m.
CVE-2024-5680
cve-2024-5680
improper validation
array index
local dos
foxboro.sys
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
16.1%
CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL
call in the Foxboro.sys driver.
Affected configurations
Node
schneider-electricecostruxure_foxboro_dcs_control_core_servicesRange≤9.8
Related
vulnrichment
vulnrichment
CVE-2024-5680
2024-07-11 08:25:45
cvelist
cvelist
CVE-2024-5680
2024-07-11 08:25:45
cve
cve
CVE-2024-5680
2024-07-11 09:15:03
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
16.1%
Related for NVD:CVE-2024-5680