CVE-2024-5679 - CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or

Back Back to CVE browser

HIGH

CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or

Published Jul 11, 2024

7.1

HIGH

CVSS 3.1

EPSS 0.15%

Description

CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Affected products

Vendor Schneider Electric Product EcoStruxure Foxboro DCS Core Control Services Default
unaffected
Affected
- Versions 9.8 and prior

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Schneider Electric	EcoStruxure Foxboro DCS Core Control Services	unaffected	Affected Versions 9.8 and prior

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-191-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-191-02.pdf		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46852		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Jul 11, 2024

Updated Aug 1, 2024

Reserved Jun 6, 2024

Link CVE-2024-5679

CISA Vulnrichment

Updated Jul 11, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-5679

Red Hat

No data

ENISA EUVD

Assigner schneider

Published Jul 11, 2024

Updated Aug 1, 2024

Link EUVD-2024-46852

GitHub

No data