IM
IronMonkey Threat Research
‹ Back to ICS Advisories

Schneider Electric SCADAPack x70 Products

MEDIUM
CVSS 6.5
Date 2026-09-15T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

We strongly recommend the following industry cybersecurity best practices. * Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. * Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks. * Place all controllers in locked cabinets and never leave them in the “Program” mode. * Never connect programming software to any network other than the network intended for that device. * Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks. * Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation. * Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet. * When remote access is required, use secure methods, such as virtual private networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices. For more information refer to the Schneider Electric [Recommended Cybersecurity Best Practices](https://www.se.com/us/en/download/document/7EN52-0390/) document.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2026-81861 6.5 medium
CVE-2026-81861. There is an insufficiently protected credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

// Affected Products (7)

Vendor Product Asset Type Purdue Level Firmware
Schneider Electric Unknown scada_server
L2
--
Schneider Electric Unknown scada_server
L2
--
Schneider Electric Unknown scada_server
L2
--
Schneider Electric Unknown scada_server
L2
--
Schneider Electric Unknown scada_server
L2
--
Schneider Electric Unknown scada_server
L2
--
Schneider Electric Unknown scada_server
L2
--

// Remediations (2)

Mitigation: Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sectio
Implement the Role-Based Access Control (RBAC) feature and follow the SCADAPack documentation sections Security Guidelines for Administrators and Working with Role-Based Access Control. RBAC is the recommended access control mechanism for SCADAPack 47x devices and should be used in place of the Secure Lock feature. The Secure Lock feature is legacy functionality retained for backward compatibility with existing deployments and should only be used where required to support legacy system requirements. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, apply the following standard practices to reduce the risk of exploitation: • Configure network segmentation to restrict access between trusted and untrusted networks. • Enable and implement the RTU firewall service to restrict unauthorized access to device services and reduce the attack surface. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)
Mitigation: Ensure setup of network segmentation to restrict access between trusted and untrusted networks and i
Ensure setup of network segmentation to restrict access between trusted and untrusted networks and implementation of the RTU Firewall Service to restrict unauthorized access to services. Consult the SCADAPack Cybersecurity Guide, including the SCADAPack Hardening and Secured Communication sections. In addition, implement all best practices referenced in the SCADAPack Cybersecurity Guide. Documentation available in [RemoteConnect and SCADAPack x70 Utilities | Schneider Electric](https://www.se.com/ww/en/download/document/RemoteConnect/)

// References