Schneider ELectric EcoStruxure Foxboro DCS Core Control Services

• CVE-2024-5681 High 7.8 CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with local user access cr 0.2%
• CVE-2024-5680 High 7.1 CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service when a malicious actor with local user access crafts a script/program using an IOCTL call in t 0.1%
• CVE-2024-5679 High 7.1 CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, or kernel memory leak when a malicious actor with local user access crafts a script/program using an IOCTL c 0.1%