← Back to home
ICSA-24-345-02  ·  Published 2024-07-09  ·  View on CISA ICS-CERT ↗

Schneider Electric EcoStruxure Foxboro DCS Core Control Services

CVSS 7.8 HIGH

Remediations

  • Patch HF97872598 available for v9.5 to v9.8 of EcoStruxureTM Foxboro DCS Core Control Services includes a fix for these vulnerabilities. Please contact your local Service Representative or Schneider Electric Process Automation Global Customer Support Center for information on how to download and install this fix:
  • As the identified vulnerabilities require local user account access, EcoStruxureTM Foxboro DCS workstations should be installed in a secure location to prevent physical access by unauthorized personnel, and appropriate password protections put in place to prevent remote access by unauthorized personnel. To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric’s security notification service here: https://www.se.com/en/work/support/cybersecurity/securitynotifications. jsp

Affected Vendors

Schneider Electric

Affected Products (3)

Schneider Electric · EcoStruxureTM Foxboro DCS Core Control Services <=9.8
Schneider Electric · EcoStruxureTM Foxboro DCS Core Control Services >=v9.5|<v9.8
Schneider Electric · EcoStruxureTM Foxboro DCS Core Control Services HF97872598

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more