Summary
Schneider Electric is aware of a vulnerability in its RemoteConnect and SCADAPack™ x70 Utilities software
product.
The RemoteConnect and SCADAPack™ x70 Utilities https://www.se.com/ww/en/product-category/6000-telemetry-and-remote-scada-systems/ product is a configuration software providing a user
interface that allows users to configure and manage communications and operations for SCADAPack™ x70
devices.
Failure to apply the Mitigations provided below may risk deserialization of untrusted data, which could result in
loss of confidentiality, integrity and potential remote code execution on the compromised workstation.
Vulnerabilities 1
-
High 7.8
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity a…
Revision history
-
#3.0.0
Remediations are now available for the Security Administrator configuration software included in the RemoteConnect and SCADAPack™ x70 Utilities product bundle.
-
#2.0.0
The affected versions for the RemoteConnect and Security Administrator has been identified, and a remediation is now available for the RemoteConnect configuration software included in the RemoteConnect and SCADAPack™ x70 Utilities product bundle.
-
#1.0.0
Original Release
References
-
RemoteConnect and SCADAPack™ x70 Utilities - SEVD-2025-014-06 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-06.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/