CVE-2026-0667
criticalpriority · track · 0EPSS 0.005 · 45 %ileEURUUSEPSS · scored 2026-10-27
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRemoteConnectcisa_csaf_ot
Version R3.4.2 of RemoteConnect includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/ - FixedSCADAPack™ 47x firmware versions prior to 9.12.2 installed on SCADAPack™ 47x versions prior to R3.4.2cisa_csaf_ot
Version R3.4.2 (Firmware version 9.12.2) of SCADAPack™ 47x and SCADAPack™ 47xi includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/ - FixedSCADAPack™ 47xi firmware versions prior to 9.12.2 installed on SCADAPack™ 47xi versions prior to R3.4.2cisa_csaf_ot
Version R3.4.2 (Firmware version 9.12.2) of SCADAPack™ 47x and SCADAPack™ 47xi includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/RemoteConnect/
https://www.se.com/ww/en/download/document/RemoteConnect/ - MitigationRemoteConnectcisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit: • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationSCADAPack™cisa_csaf_ot
Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services. • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationSCADAPack™ 47x firmware versions prior to 9.12.2 installed on SCADAPack™ 47x versions prior to R3.4.2cisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit: • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/ - MitigationSCADAPack™ 47xi firmware versions prior to 9.12.2 installed on SCADAPack™ 47xi versions prior to R3.4.2cisa_csaf_ot
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: Follow the information according to SCADAPack™ Security Guidelines in section 8.3 Secured Communication. Also, apply the following standard practices to reduce the risk of exploit: • Setup network segmentation and implement the RTU firewall service to block all unauthorized access to services • Disable the logic debug service.
https://www.se.com/ww/en/download/document/SCADAPack_Cybersecurity_Guide/
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.1–9.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (18)
Products and version ranges known to be affected.
- Schneider Electric SCADAPack 47x≤ Versions prior to R3.4.2 (Firmware version prior to 9.12.2)enisa_euvdEU
- Schneider Electric SCADAPack 47xi≤ Versions prior to R3.4.2 (Firmware version prior to 9.12.2)enisa_euvdEU
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-26-076-02Schneider Electric SCADAPack and RemoteConnect2026-02-10icsa · cisa_csaf_otUS
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the remediations provided below may risk unauthorized access to your RTU, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (3)
External citations — patches, advisories, analysis.
- https://download.se.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdfcnnvd
- https://download.se.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdfenisa_euvd
- https://download.se.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdfnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan