CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2024-5680

CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.8%

CVSS Severity

CVSS v3 Score 7.1

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-191-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-191-02.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-191-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-191-02.pdf

Products affected by CVE-2024-5680

Schneider-Electric » Ecostruxure Foxboro Dcs Control Core Services » Version: N/A

cpe:2.3:a:schneider-electric:ecostruxure_foxboro_dcs_control_core_services:-
Schneider-Electric » Ecostruxure Foxboro Dcs Control Core Services » Version: 9.8

cpe:2.3:a:schneider-electric:ecostruxure_foxboro_dcs_control_core_services:9.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-5680

Products

Pricing

Contact Us