CVE-2026-81861
mediumPriorität · verfolgen · 10EPSS 0.005 · 45. PerzentilExploit · PoCUSEPSS · bewertet 2026-10-27
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationSCADAPack 32cisa_csaf_ot
Ensure setup of network segmentation to restrict access between trusted and untrusted networks and implementation of the RTU Firewall Service to restrict unauthorized access to services. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, implement all best practices referenced in the SCADAPack Cybersecurity Guide. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationSCADAPack 3xxcisa_csaf_ot
Ensure setup of network segmentation to restrict access between trusted and untrusted networks and implementation of the RTU Firewall Service to restrict unauthorized access to services. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, implement all best practices referenced in the SCADAPack Cybersecurity Guide. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationSCADAPack 470Rcisa_csaf_ot
Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control. RBAC is the recommended access control mechanism for SCADAPack 47x devices and should be used in place of the Secure Lock feature. The Secure Lock feature is legacy functionality retained for backward compatibility with existing deployments and should only be used where required to support legacy system requirements. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, apply the following standard practices to reduce the risk of exploitation: • Configure network segmentation to restrict access between trusted and untrusted networks. • Enable and implement the RTU firewall service to restrict unauthorized access to device services and reduce the attack surface. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationSCADAPack 47xcisa_csaf_ot
Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control. RBAC is the recommended access control mechanism for SCADAPack 47x devices and should be used in place of the Secure Lock feature. The Secure Lock feature is legacy functionality retained for backward compatibility with existing deployments and should only be used where required to support legacy system requirements. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, apply the following standard practices to reduce the risk of exploitation: • Configure network segmentation to restrict access between trusted and untrusted networks. • Enable and implement the RTU firewall service to restrict unauthorized access to device services and reduce the attack surface. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationSCADAPack 47xdcisa_csaf_ot
Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control. RBAC is the recommended access control mechanism for SCADAPack 47x devices and should be used in place of the Secure Lock feature. The Secure Lock feature is legacy functionality retained for backward compatibility with existing deployments and should only be used where required to support legacy system requirements. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, apply the following standard practices to reduce the risk of exploitation: • Configure network segmentation to restrict access between trusted and untrusted networks. • Enable and implement the RTU firewall service to restrict unauthorized access to device services and reduce the attack surface. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationSCADAPack 47xicisa_csaf_ot
Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control. RBAC is the recommended access control mechanism for SCADAPack 47x devices and should be used in place of the Secure Lock feature. The Secure Lock feature is legacy functionality retained for backward compatibility with existing deployments and should only be used where required to support legacy system requirements. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, apply the following standard practices to reduce the risk of exploitation: • Configure network segmentation to restrict access between trusted and untrusted networks. • Enable and implement the RTU firewall service to restrict unauthorized access to device services and reduce the attack surface. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationSCADAPack 57xcisa_csaf_ot
Ensure setup of network segmentation to restrict access between trusted and untrusted networks and implementation of the RTU Firewall Service to restrict unauthorized access to services. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, implement all best practices referenced in the SCADAPack Cybersecurity Guide. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
https://www.se.com/ww/en/download/document/RemoteConnect/
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
betroffene Produkte (14)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-26-258-04Schneider Electric SCADAPack x70 Products2026-09-08icsa · cisa_csaf_otUS
Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the mitigations provided below may increase the risk of unauthorized access to RTU configuration through the Secure Lock functionality, potentially resulting in a loss of confidentiality.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (1) nvd
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan