Summary
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products.
The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that
provide communication capabilities for remote monitoring and control.
Failure to apply the remediations provided below may risk unauthorized access to your RTU, which could
result in the possibility of denial of service and loss of confidentiality, integrity of the controller.
Vulnerabilities 1
-
Critical 9.3
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, …
Revision history
-
#2
Initial CISA Republication of Schneider Electric CPCERT SEVD-2026-041-01 advisory
-
#1
Original Release
References
-
Improper Check for Unusual or Exceptional Conditions on Multiple Products - SEVD-2026-041-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390
-
ICS Advisory ICSA-26-076-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-02
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b