Vulnerabilities > CVE-2024-5680 - Unspecified vulnerability in Schneider-Electric Ecostruxure Foxboro DCS Control Core Services

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
schneider-electric

Summary

CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Vulnerable Configurations

Part Description Count
Application
Schneider-Electric
1