Skip to content
OpenAdvisories
High ICSA-25-028-06 1 CVE

Schneider Electric RemoteConnect and SCADAPack x70 Utilities (Update A)

Published Jan 14, 2025 · Updated Jan 29, 2026 · Revision 4

Vendor: Schneider Electric Product: RemoteConnect and SCADAPack™ x70 Utilities - RemoteConnect Product: RemoteConnect and SCADAPack™ x70 Utilities - Security Administrator Product: RemoteConnect configuration software

Summary

Schneider Electric is aware of a vulnerability in its RemoteConnect and SCADAPack™ x70 Utilities software
product.
The RemoteConnect and SCADAPack™ x70 Utilities https://www.se.com/ww/en/product-category/6000-telemetry-and-remote-scada-systems/ product is a configuration software providing a user
interface that allows users to configure and manage communications and operations for SCADAPack™ x70
devices.
Failure to apply the Mitigations provided below may risk deserialization of untrusted data, which could result in
loss of confidentiality, integrity and potential remote code execution on the compromised workstation.

Vulnerabilities 1

Revision history

  1. #4

    CISA Republication update based on Schneider Electric CPCERT SEVD-2025-014-06 advisory

  2. #3

    The affected versions for the RemoteConnect and Security Administrator has been identified, and a remediation is now available for the RemoteConnect configuration software included in the RemoteConnect and SCADAPack™ x70 Utilities product bundle.

  3. #2

    Initial Publication

  4. #1

    Original Release

References