OPC Factory Server

An attacker with local access to the OFS server could read sensitive configuration files and credentials, potentially compromising the security of connected automation devices and SCADA/DCS systems managing energy infrastructure. Exposed credentials could enable unauthorized access to PLC configurations, setpoint changes, or process monitoring systems.

Energy utilities and industrial manufacturers operating Schneider Electric automation platforms with OPC Factory Server should prioritize this fix. OFS is commonly used to expose real-time data from PLCs, RTUs, and electrical distribution control systems to SCADA clients and enterprise systems. Compromised file access could leak credentials for field devices or reveal process logic tied to power distribution or generation equipment.

An attacker with local user credentials (low-privilege account) on the OFS server can supply a malicious input to trigger XML External Entity (XXE) injection, causing the OFS application to parse an external entity and leak file system contents. The attacker can then read sensitive files containing device credentials, connection strings, or automation logic configurations.