Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Industrial control advisorySeverity 6.5 medium

Schneider Electric SCADAPack x70 Products

ICSA-26-258-04 · CISA · September 8, 2026

Summary

Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the mitigations provided below may increase the risk of unauthorized access to RTU configuration through the Secure Lock functionality, potentially resulting in a loss of confidentiality.

From CISA, quoted as published. Check the source before acting.

What to do

Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control. RBAC is the recommended access control mechanism for SCADAPack 47x devices and should be used in place of the Secure Lock feature. The Secure Lock feature is legacy functionality retained for backward compatibility with existing deployments and should only be used where required to support legacy system requirements. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, apply the following standard practices to reduce the risk of exploitation: • Configure network segmentation to restrict access between trusted and untrusted networks. • Enable and implement the RTU firewall service to restrict unauthorized access to device services and reduce the attack surface. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/) Ensure setup of network segmentation to restrict access between trusted and untrusted networks and implementation of the RTU Firewall Service to restrict unauthorized access to services. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, implement all best practices referenced in the SCADAPack Cybersecurity Guide. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2026-818616.5 mediumNo0.5%Insufficiently Protected Credentials (CWE-522)

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
Schneider ElectricSCADAPack 47xvers:all/*—
Schneider ElectricSCADAPack 47xivers:all/*—
Schneider ElectricSCADAPack 47xdvers:all/*—
Schneider ElectricSCADAPack 470Rvers:all/*—
Schneider ElectricSCADAPack 57xvers:all/*—
Schneider ElectricSCADAPack 3xxvers:all/*—
Schneider ElectricSCADAPack 32vers:all/*—

Why it's on these mode pages

  • Pipeline: Vendor table: Schneider Electric (matched by rule)

Change history

  1. September 8, 2026: Original Release
  2. September 15, 2026: Initial CISA Republication of Schneider Electric SEVD-2026-251-03 advisory
  3. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com