The flaw is an insecure deserialization vulnerability that allows a malicious project file to be opened by an authenticated administrator. When the file is processed, untrusted data is deserialized, which can lead to loss of confidentiality, loss of integrity and, in the most severe cases, remote code execution. The description explicitly states that the vulnerability could result in remote code execution on the workstation when an admin opens a malicious file.

Schneider Electric EcoStruxure Foxboro DCS workstations are affected; the vulnerability applies to the desktop component that imports and opens project files.

The CVSS score of 7 indicates moderate to high severity. The EPSS score of less than 1% suggests that exploitation attempts are currently rare, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a local or network-based user who has authenticated as an administrator and chooses to open a crafted project file; this inference is drawn from the description which states the vulnerability can be triggered when an admin opens a malicious file. Successful exploitation could allow an attacker to achieve full remote code execution on the affected workstation.