42 matches found
EcoStruxure Foxboro DCS Deserialization Code Execution
The vulnerability of the microprogrammed software in the distributed control system EcoStruxure Foxboro DCS is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Schneider Electric EcoStruxure Foxboro DCS Code Issue Vulnerability
The Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric, France. A code issue vulnerability exists in the Schneider Electric EcoStruxure Foxboro DCS, which can be exploited by an attacker to cause compromise of...
PT-2026-28855
Уязвимость микропрограммного обеспечения распределённой системы управления EcoStruxure Foxboro DCS связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
Schneider Electric EcoStruxure Foxboro DCS code-related vulnerabilities
The Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric, France. A code issue vulnerability exists in the Schneider Electric EcoStruxure Foxboro DCS, which can be exploited by an attacker to cause compromise of...
EUVD-2024-46854
Malicious code in bioql PyPI...
EUVD-2023-34048
Malicious code in bioql PyPI...
Foxboro.sys DoS
The vulnerability of the Foxboro.sys driver, a microprogramming software for distributed control systems like EcoStruxureTM Foxboro DCS Control Core Services, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause system failures...
Foxboro.sys Driver Code Execution
The vulnerability of the Foxboro.sys driver, a microprogramming software for distributed system control systems like EcoStruxureTM Foxboro DCS Control Core Services, lies in the possibility of writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...
Project File Handler Component Code Execution
The vulnerability of the Project File Handler component in the configuration and programming environment of EcoStruxure Foxboro SCADA Fox RTU Station is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a attacker to...
Foxboro.sys DoS
The vulnerability of the Foxboro.sys driver, a microprogramming software for distributed control systems like EcoStruxureTM Foxboro DCS Control Core Services, is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2024-5680
CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and earlier, which stems fr...
EcoStruxure Foxboro DCS Core Control Services Buffer Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. A buffer error vulnerability exists in EcoStruxure Foxboro DCS Core Control Services 9.8 and prior versions, which stems from the presence of an...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Core Control Services version 9.8 and prior versions, which...
PT-2024-5155 · Unknown · Foxboro.Sys
Name of the Vulnerable Software and Affected Versions: Foxboro.sys driver affected versions not specified Description: The issue is related to an Improper Validation of Array Index, which could cause a local denial-of-service when a malicious actor with local user access crafts a script or progra...
PT-2024-5178 · Schneider Electric · Ecostruxure Foxboro Dcs Control Core Services
Name of the Vulnerable Software and Affected Versions: EcoStruxureTM Foxboro DCS Control Core Services affected versions not specified Description: The issue is related to insufficient input validation in the Foxboro.sys driver, which could allow an attacker to cause a denial-of-service,...
PT-2024-5157
Name of the Vulnerable Software and Affected Versions: EcoStruxure Foxboro SCADA FoxRTU Station affected versions not specified Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow an...
PT-2024-5154 · Unknown · Foxboro.Sys
Name of the Vulnerable Software and Affected Versions: Foxboro.sys driver affected versions not specified Description: The issue is related to an Out-of-Bounds Write vulnerability that could cause local denial-of-service or kernel memory leak. A malicious actor with local user access can craft a...
Foxboro.sys Driver Code Execution
The vulnerability of the Foxboro.sys driver, a microprogramming software component of the distributed control system EcoStruxureTM Foxboro DCS Control Core Services, is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause service failures or execute...
Schneider Electric EcoStruxure Foxboro DCS Input Validation Error Vulnerability
The Schneider Electric EcoStruxure Foxboro DCS is an innovative fault-tolerant, highly available control component from Schneider Electric, France. An input validation error vulnerability exists in Schneider Electric EcoStruxure Foxboro DCS Control Core Services, which stems from incorrect...