← Database

CVE-2024-5681

HIGH CVSS: 7.8 Published: 2024-07-11 Modified: 2026-06-17

Description

CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Affected Platforms

Schneider-Electric Ecostruxure Foxboro Dcs Control Core Services

Weakness Type

CWE-20

References