TAC I/A Series G3 Directory Traversal Vulnerability Disclosure

This document discloses a directory traversal vulnerability in Schneider Electric's TAC I/A Series G3 product line (versions 3.5 and 3.6), which allows users with valid accounts or guest privileges to escalate their privileges. It recommends upgrading to specific maintenance builds (3.5.39, 3.5.403, or 3.6.47) and applying the patch to mitigate the risk.