Schneider Electric SCADAPack and RemoteConnect
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the remediations provided below may risk unauthorized access to your RTU, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-0667US | — | — | ||
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity whe… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Improper Check for Unusual or Exceptional Conditions on Multiple Products - SEVD-2026-041-01 PDF Versionself
- Improper Check for Unusual or Exceptional Conditions on Multiple Products - SEVD-2026-041-01 CSAF Versionself
- ICS Advisory ICSA-26-076-02 JSONself
- ICS Advisory ICSA-26-076-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (7)
- MitigationRemoteConnect
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit: • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationSCADAPack™
Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services. • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationSCADAPack™ 47x firmware versions prior to 9.12.2 installed on SCADAPack™ 47x versions prior to R3.4.2
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit: • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationSCADAPack™ 47xi firmware versions prior to 9.12.2 installed on SCADAPack™ 47xi versions prior to R3.4.2
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit: • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - BehobenRemoteConnect
Version R3.4.2 of RemoteConnect includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/ - BehobenSCADAPack™ 47x firmware versions prior to 9.12.2 installed on SCADAPack™ 47x versions prior to R3.4.2
Version R3.4.2 (Firmware version 9.12.2) of SCADAPack™ 47x and SCADAPack™ 47xi includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/ - BehobenSCADAPack™ 47xi firmware versions prior to 9.12.2 installed on SCADAPack™ 47xi versions prior to R3.4.2
Version R3.4.2 (Firmware version 9.12.2) of SCADAPack™ 47x and SCADAPack™ 47xi includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan