SEVD-2023-164-04

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxureTM Foxboro DCS product formerly known as Foxboro Evo Process Automation System and I/A Series. The DCS component impacted is the Control Core Services package. The EcoStruxureTM Foxboro DCS product is an innovative family of fault-tolerant, highly available control components, which consolidates critical information and elevates staff capabilities to ensure flawless, continuous plant operation. Failure to apply the remediations provided below may risk denial of service, privilege escalation, and kernel code execution, which could result in loss of system functionality or unauthorized access to system functions