ICS-Advisories

Risk Evaluation

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected. The [EcoStruxure™ Foxboro DCS](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/) product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and elevates staff capabilities to ensure flawless, continuous plant operation. Failure to apply the remediation provided below may risk deserialization of untrusted data, which could result in loss of confidentiality, integrity and potential remote code execution on the compromised workstation.

Zusammenfassung der Gegenmaßnahmen

Version CS 8.1 of EcoStruxure™ Foxboro DCS includes a fix for this vulnerability and is available through https://buyautomation.se.com/ CS 8.1 requires FX-V3 licenses, standard upgrade procedures apply. A reboot is required for workstations and servers. Depending on the existing system version, online upgrade without production interruption might be possible. We recommend you work with your local Field Service Representative or Technical Service Consultant for further information.