Skip to content
OpenAdvisories
Medium ICSA-26-020-01 1 CVE

Schneider Electric EcoStruxure Foxboro DCS (Update A)

Published Dec 9, 2025 · Updated Feb 24, 2026 · Revision 4

Vendor: Intel Vendor: Schneider Electric Product: EcoStruxure™ Foxboro DCS Server Product: EcoStruxure™ Foxboro DCS Standard Workstation Product: EcoStruxure™ Foxboro DCS Virtualization Server Product: Xeon Product: Xeon Silver

Summary

Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro
DCS product formerly known as Foxboro Evo Process Automation System and I/A Series.
The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/#overview) is an innovative family of fault-tolerant, highly available
control components, which consolidates critical information and elevates staff capabilities to ensure
flawless, continuous plant operation.
Failure to apply the remediations provided below may risk allowing an authenticated user to
potentially enable information disclosure via a side channel with local access, which could result in
loss of system functionality or unauthorized access to system functions.

Vulnerabilities 1

Revision history

  1. #4

    CISA Republication update based on Schneider Electric CPCERT SEVD-2025-343-01 advisory

  2. #3

    H90 DC Server has been added to the affected products. The remediation section has been updated with H94 and details on how customers can determine if offer is impacted.

  3. #2

    Initial Republication of Schneider Electric CPCERT SEVD-2025-343-01 advisory

  4. #1

    Original Release

References