Description
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | SCADAPack 47x | Versions prior to R3.4.2 (Firmware version prior to 9.12.2) | — |
| Schneider Electric | SCADAPack 47xi | Versions prior to R3.4.2 (Firmware version prior to 9.12.2) | — |
| Schneider Electric | SCADAPack 57x | All Versions | — |
| Schneider Electric | RemoteConnect | Versions prior to R3.4.2 | — |
Advisories 2
- ICSA-26-076-02 Schneider Electric SCADAPack and RemoteConnect CISA ICS & IT advisories · Mar 17, 2026
- SEVD-2026-041-01 Improper Check for Unusual or Exceptional Conditions on Multiple Products Schneider Electric CPCERT · Feb 10, 2026