Description
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when an admin authenticated user opens a malicious project file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ Foxboro DCS | Versions prior to CS8.1 | — |
Advisories 2
- ICSA-26-083-02 Schneider Electric EcoStruxure Foxboro DCS CISA ICS & IT advisories · Mar 24, 2026
- SEVD-2026-069-03 Deserialization of Untrusted Data vulnerability on EcoStruxure™ Foxboro DCS Schneider Electric CPCERT · Mar 13, 2026