Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-25-352-02 1 CVE

Schneider Electric EcoStruxure Foxboro DCS Advisor

Published Dec 9, 2025 · Updated Dec 18, 2025 · Revision 2

Vendor: Microsoft Vendor: Schneider Electric Product: EcoStruxure™ Foxboro DCS Advisor services Product: Windows Server 2016 Product: Windows Server 2022 Product: Windows Server Update Services

Summary

Schneider Electric is aware of a vulnerability disclosed by Microsoft in the Microsoft Windows Server Update
Services (WSUS) used in the EcoStruxure™ Foxboro DCS Advisor services.

The EcoStruxure™ Foxboro DCS Advisor, an optional component of the [EcoStruxure™ Foxboro DCS system](https://www.se.com/ww/en/work/products/industrial-automation-control/foxboro-dcs/),
facilitates remote connectivity and diagnostics by continuously monitoring key performance indicators (KPI) on
the I/A Series or Control Software system's process.

Failure to apply the remediations provided below may risk a potential remote code execution event, which
could result in system-level privileges acquired by unauthorized parties.

Vulnerabilities 1

Revision history

  1. #2

    Initial Republication of Schneider Electric CPCERT SEVD-2025-343-02 advisory

  2. #1

    Original Release

References