Input validation

2023-06-1408:15:00

PRIOn knowledge base

www.prio-n.com

improper validation

array index vulnerability

denial-of-service

kernel execution

local user access

ioctl call

foxboro.sys

nvd

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

JSON

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local
denial-of-service, and potentially kernel execution when a malicious actor with local user access
crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver.