Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-10083

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated user with crafted input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Uni-Telway driver

Default version status: unaffected

  • All versionsaffected

Schneider Electric Uni-Telway driver used in EcoStruxure Control Expert

Default version status: unaffected

  • All versionsaffected

Schneider Electric Uni-Telway driver used in EcoStruxure Process Expert

Default version status: unaffected

  • All Versionsaffected

Schneider Electric Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform

Default version status: unaffected

  • All Versionsaffected

Schneider Electric Uni-Telway driver used in OPC Factory Server

Default version status: unaffected

  • All Versionsaffected

References