Skip to content
OpenAdvisories
Medium ICSA-26-083-02 1 CVE

Schneider Electric EcoStruxure Foxboro DCS

Published Mar 10, 2026 · Updated Mar 24, 2026 · Revision 3

Vendor: Schneider Electric Product: EcoStruxure™ Foxboro DCS

Summary

Schneider Electric is aware of a vulnerability in its EcoStruxure Foxboro DCS Control Software on Foxboro DCS workstations and servers. Control Core Services and all runtime software, like FCPs, FDCs, and FBMs, are not affected.

The EcoStruxure Foxboro DCS ([https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/)) product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and elevates staff capabilities to ensure flawless, continuous plant operation.

Failure to apply the remediation provided below may risk deserialization of untrusted data, which could result in loss of confidentiality, integrity and potential remote code execution on the compromised workstation.

Vulnerabilities 1

Revision history

  1. #3

    Initial CISA Republication of Schneider Electric Security Notification SEVD-2026-069-03

  2. #2

    Updated remediation and mitigations section.

  3. #1

    Original Release

References