Vulnerabilities > Schneider Electric > Ecostruxure Foxboro DCS Control Core Services > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-07-11	CVE-2024-5680	Improper Validation of Array Index vulnerability in Schneider-Electric Ecostruxure Foxboro DCS Control Core Services CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver. local low complexity schneider-electric CWE-129	5.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.