VDB
CNVD-2023-55389
CNVD-2023-55389
PUBLISHED
CVSS 7 HIGH
Schneider Electric EcoStruxure Foxboro DCS是法国施耐德电气（Schneider Electric）公司的一个创新的容错、高度可用的控制组件。 Schneider Electric EcoStruxure Foxboro DCS Control Core Services存在输入验证错误漏洞，该漏洞源于数组索引的不正确验证，远程攻击者可利用该漏洞在系统上执行任意代码。
Risk Scores
CVSS v3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | EcoStruxure Foxboro DCS Control Core Services | All versions prior to patch HF9857795 |
Timeline
- Jun 16, 2023 CVE ID Reserved
- Jul 12, 2023 CVE Published