IM
IronMonkey Threat Research
‹ Back to ICS Advisories

EcoStruxure Foxboro SCADA FoxRTU Station

HIGH
CVSS 7.3
Date 2026-10-16T20:34:30+00:00
Source schneider-electric
Published by Schneider Electric

// Description

# Schneider Electric Security Notification 09-Jul-24 Document Reference Number – SEVD-2024 -191-03 Page 1 of 5 ## EcoStruxure Foxboro SCADA FoxRTU Station 9 July 2024 Overview Schneider Electric is aware of a vulnerability in its EcoStruxure™ Foxboro SCADA FoxRTU Station product. FoxRTU Station software facilitates configuration, diagnostics, logic development and device management for the SCD2200. The EcoStruxure™ Foxboro SCADA SCD2200 product is a modular Remote Terminal Unit (RTU) for remote SCADA applications. Failure to apply the remediations provided below may risk remote code execution, which could result in denial-of-service or unauthorized access to system functions. Affected Products and Versions Product Version FoxRTU Station All versions prior to v9.3.0 Vulnerability Details CVE ID: CVE-2024-2602 CVSS v3.1 Base Score 7.3 | High | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor. Note regarding vulnerability details: The severity of vulnerabilities was calculated using the CVSS Base metrics in version 3.1 (CVSS v3.1) without incorporating the Temporal and Environmental metrics. Schneider Electric recommends that customers score the CVSS Environmental metrics, which are specific to end-user organizations, and consider factors such as the presence of mitigations in that environment. Environmental metrics may refine the relative severity posed by the vulnerabilities described in this document within a customer’s environment. Schneider Electric Security Notification 09-Jul-24 Document Reference Number – SEVD-2024 -191-03 Page 2 of 5 Remediation Affected Product & Version Remediation FoxRTU Station All versions prior to v9.3.0

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2024-2602 7.3 high
CVE-2024-2602. CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could result in remote code execution when an authenticated user executes a saved project file that has been tampered by a malicious actor.

// Affected Products (1)

Vendor Product Asset Type Purdue Level Firmware
Schneider Electric Schneider Electric FoxRTU Station rtu
L1
--

// Remediations (2)

Mitigation: As the identified vulnerability requires file write access on the machine on which FoxRTU Station i
As the identified vulnerability requires file write access on the machine on which FoxRTU Station is installed, proper file system access control restrictions should be implemented to prevent unauthorized users from editing FoxRTU Station project files or placing malicious DLLs in accessible directories. • Store the project files in a secure storage and restrict the access to only trusted users • When exchanging files over the network, use secure communication protocols • Encrypt project files when stored • Only open project files received from trusted source • Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage • Follow workstation, network and site-hardening guidelines in the Recommended Cybersecurity Best Practices available here: https://www.se.com/us/en/download/document/7EN52- 0390/ • To ensure you are informed of all updates, including details on affected products and remediation plans, subscribe to Schneider Electric’s security notification service here: https://www.se.com/en/work/support/cybersecurity/securit y-notifications.jsp
Patch: Version 9.3.0 of FoxRTU Station includes a fix for this vulnerability. Please contact your local Se
Version 9.3.0 of FoxRTU Station includes a fix for this vulnerability. Please contact your local Service Representative or Schneider Electric Process Automation Global Customer Support Center for information on how to download and install this fix: Process Automation | Global Customer Support (se.com) Please follow the instructions in Chapter 12 of User Guide B0780AE rev. P, “Security: Securing a Project” to encrypt and password protect project files.

// References