Summary
Schneider Electric is aware of a vulnerability in its SCADAPack 300E Series RTU products.
The SCADAPack 300E Series RTUs are a range of compact Smart RTU which control and monitor remote assets.
Failure to apply the remediation or mitigations provided below may risk a Denial of Service (DoS) attack, which could result in a forced restart to restore availability.
Vulnerabilities 1
-
Unscored —
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Servi…
Revision history
-
#1.0.0
Original Release
References
-
SCADAPack 300E Series RTU - SEVD-2021-313-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-313-01_SCADAPack_3000E_RTUs_Security_Notification.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/