TwidoSuite Security Notification SEVD-2019-253-03

This document details multiple security vulnerabilities in Schneider Electric's TwidoSuite v2.20.11 software, including an Untrusted Search Path (CWE-426) and an Input Validation (CWE-20) flaw that could allow arbitrary code execution. It provides remediation guidance, noting the product is end-of-service, and recommends upgrading to Modicon M221 or other Modicon PLCs, along with general cybersecurity best practices.