Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A)
Schneider Electric is aware of a vulnerability in its RemoteConnect and SCADAPack™ x70 Utilities software product. The RemoteConnect and SCADAPack™ x70 Utilities https://www.se.com/ww/en/product-category/6000-telemetry-and-remote-scada-systems/ product is a configuration software providing a user interface that allows users to configure and manage communications and operations for SCADAPack™ x70 devices. Failure to apply the Mitigations provided below may risk deserialization of untrusted data, which could result in loss of confidentiality, integrity and potential remote code execution on the compromised workstation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-12703US | — | — | ||
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity
and potential remote code execution on workstation when a non-… | ||||
references
External citations — patches, advisories, analysis.
- RemoteConnect and SCADAPack™ x70 Utilities - SEVD-2025-014-06 PDF Versionself
- RemoteConnect and SCADAPack™ x70 Utilities - SEVD-2025-014-06 CSAF Versionself
- ICS Advisory ICSA-25-028-06 JSONself
- ICS Advisory ICSA-25-028-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationRemoteConnect and SCADAPack™ x70 Utilities - RemoteConnect
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Schneider Electric is establishing a remediation plan for all future versions of Security Administrator configuration software that will include a fix for this vulnerability. We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit:• Only open project files received from a trusted source. • Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage.• Encrypt project file when stored and restrict the access to only trusted users. • When exchanging files over the network, use secure communication protocols. • Follow the SCADAPack™ Security Guidelines
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationRemoteConnect and SCADAPack™ x70 Utilities - Security Administrator
Schneider Electric is establishing a remediation plan for all future versions of Security Administrator configuration software that will include a fix for this vulnerability. We will update this document when the remediation is available. Until then, customers should immediately apply the following mitigations to reduce the risk of exploit:• Only open project files received from a trusted source. • Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage.• Encrypt project file when stored and restrict the access to only trusted users. • When exchanging files over the network, use secure communication protocols. • Follow the SCADAPack™ Security Guidelines
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - FixedRemoteConnect and SCADAPack™ x70 Utilities - RemoteConnect
Version R3.4.2 RemoteConnect configuration software includes a fix for this vulnerability and is available for download here:https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan