Description
CWE-20: Improper Input Validation vulnerability exists that could cause local denial-of-service, privilege escalation, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an IOCTL call in the Foxboro.sys driver.
Problem types
CWE-20 Improper Input Validation
Product status
Versions 9.8 and prior
References
download.schneider-electric.com/...Name=SEVD-2024-191-02.pdf
