PT-2026-24258 · Schneider Electric · Ecostruxure™ Foxboro Dcs+3
CVE-2026-1286
·
Publicado
2026-03-10
·
Atualizado
2026-03-25
CVSS v4.0
7.0
Alta
| Vetor | AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Versions prior to 2026-1286
Description
A flaw exists due to the deserialization of untrusted data. This issue could result in a loss of confidentiality and integrity, and potentially allow for remote code execution on a workstation. The issue occurs when an administrator authenticated user opens a malicious project file.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Deserialization of Untrusted Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ecostruxure™ Foxboro Dcs
Foxboro Dcs
Foxboro Evo
Ecostruxure Foxboro Dcs Control