Security Notification - SSEVD-2024-191-02 EcoStruxure Foxboro DCS Core Control Services

Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Foxboro DCS product. The following CVEs have been assigned: CVE-2024-5679 (CWE-787: Out-of-Bounds Write vulnerability), CVE-2024-5680 (CWE-129: Improper Validation of Array Index vulnerability), CVE-2024-5681 (CWE-20: Improper Input Validation vulnerability).