TAC I/A Series G3 Security Vulnerability Disclosure

This document discloses multiple security vulnerabilities in the Schneider Electric TAC I/A Series G3 product line, including directory traversal, weak credential storage, cookie weaknesses, and predictable session IDs. It outlines the risks of data leakage and privilege escalation, and recommends upgrading to software versions 3.5.39 or 3.6.47 with a patch to mitigate these issues.