CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 23:06.
Filters
1 active1 advisories found
SEVD-2026-069-03
Deserialization of Untrusted Data vulnerability on EcoStruxure™ Foxboro DCS
Risk evaluation
Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected. The [EcoStruxure™ Foxboro DCS](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/) product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and elevates staff capabilities to ensure flawless, continuous plant operation. Failure to apply the remediation provided below may risk deserialization of untrusted data, which could result in loss of confidentiality, integrity and potential remote code execution on the compromised workstation.
Mitigation summary
Version CS 8.1 of EcoStruxure™ Foxboro DCS includes a fix for this vulnerability and is available through https://buyautomation.se.com/ CS 8.1 requires FX-V3 licenses, standard upgrade procedures apply. A reboot is required for workstations and servers. Depending on the existing system version, online upgrade without production interruption might be possible. We recommend you work with your local Field Service Representative or Technical Service Consultant for further information.
Revision history (2)
Initial publication — 10 March 2026
Original Release
Update A — 13 March 2026
Updated remediation and mitigations section.