Summary
Schneider Electric is aware of a vulnerability in the AVEVA™ InTouch component which is included as part of Foxboro SCADA product.
The Foxboro SCADA product is a software package that helps provide SCADA remote communications in the most demanding applications.
Failure to apply the mitigations provided below may allow for the reading of cleartext information stored in memory, which could result in leakage of potentially sensitive data, including password information.
Revision history
-
#1.0.0
Original Release
References
-
Foxboro SCADA - SEVD-2023-164-03 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-164-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-164-03.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/