[Control systems] Schneider Electric security advisory (AV25-825)

Serial number: AV25-825
Date: December 10, 2025

On December 9, 2025, Schneider Electric published advisories to address vulnerabilities in the following products:

  • EcoStruxure™ Foxboro DCS – version EcoStruxure™ Foxboro DCS and prior
  • V91 DCS Virtualization Server and H92 DCS Standard Workstation – version Intel Xeon W-2123 and prior
  • EcoStruxure™ Foxboro DCS Advisor services with Windows Server Update Services application running on MS Server 2016 – version Microsoft updates KB5066836
  • EcoStruxure™ Foxboro DCS Advisor services with Windows Server Update Services application running on MS Server 2022 – version Microsoft updates KB5066782

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

Date modified: