Skip to content
OpenAdvisories
High · 7.8 CVE-2023-2569 EUVD-2023-34047GHSA-8whh-hcfg-87f2

A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kerne…

Published Jun 14, 2023 · Updated Jan 2, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Foxboro DCS Control Core Services Category: ICS / OT

Description

A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service,
elevation of privilege, and potentially kernel execution when a malicious actor with local user
access crafts a script/program using an IOCTL call in the Foxboro.sys driver.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Foxboro DCS Control Core Services All versions prior to patch HF9857795 —

Advisories 1

References