Beveiligingsadvies

CVE-2023-2570

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-14 07:52:24
Laatst bijgewerkt 2024-08-02 06:26:09
Toegewezen door schneider
CVSS-score 7.0
Status PUBLISHED

Beschrijving

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicious actor with local user access crafts a script/program using an unpredictable index to an IOCTL call in the Foxboro.sys driver.