Foxboro.sys Out-of-Bounds Write Vulnerability Could Lead to Local Denial-of-Service or Kernel Memory Leak
CVE-2024-5679
7.1HIGH
Summary
An out-of-bounds write vulnerability exists in the Foxboro.sys driver, allowing local users to exploit the flaw by crafting a malicious script or program that utilizes an IOCTL call. This exploitation can lead to local denial-of-service attacks or unintentional leakage of kernel memory. The vulnerability poses a significant risk, particularly in environments where the Foxboro.sys driver is deployed, as it permits unauthorized actions that can compromise system stability and security.
Affected Version(s)
EcoStruxure Foxboro DCS Core Control Services Versions 9.8 and prior
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database