Summary
Schneider Electric is aware of a vulnerability disclosed by INTEL used in the EcoStruxure™ Foxboro
DCS product formerly known as Foxboro Evo Process Automation System and I/A Series.
The [EcoStruxure™ Foxboro DCS product](https://www.se.com/ww/en/product-range/63680-ecostruxure-foxboro-dcs/#overview) is an innovative family of fault-tolerant, highly available
control components, which consolidates critical information and elevates staff capabilities to ensure
flawless, continuous plant operation.
Failure to apply the remediations provided below may risk allowing an authenticated user to
potentially enable information disclosure via a side channel with local access, which could result in
loss of system functionality or unauthorized access to system functions.
Vulnerabilities 1
-
Medium 5.9
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execut…
Revision history
-
#2.0.0
H90 DC Server has been added to the affected products. The remediation section has been updated with H94 and details on how customers can determine if offer is impacted.
-
#1.0.0
Original Release
References
-
EcoStruxure™ Foxboro DCS - SEVD-2025-343-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-343-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-343-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/