CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor.

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SCD2200 product is a modular Remote Terminal Unit (RTU) for remote SCADA applications. Failure to apply the remediations provided below may risk remote code execution, which could result in denial-of-service or unauthorized access to system functions.

Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SCD2200 product is a modular Remote Terminal Unit (RTU) for remote SCADA applications. Failure to apply the remediations provided below may risk remote code execution, which could result in denial-of-service or unauthorized access to system functions.