CVE-2024-5679 | Schneider Electric EcoStruxure Foxboro DCS Core Control Services up to 9.8 Kernel Memory Foxboro.sys out-of-bounds write (SEVD-2024-191-02)

A vulnerability was found in Schneider Electric EcoStruxure Foxboro DCS Core Control Services up to 9.8. It has been declared as critical. This vulnerability affects unknown code in the library Foxboro.sys of the component Kernel Memory Handler. The manipulation leads to out-of-bounds write.

This vulnerability was named CVE-2024-5679. The attack needs to be approached locally. There is no exploit available.

It is recommended to apply a patch to fix this issue.