PT-2026-20458 · Schneider Electric · Scadapack 47Xi+2

Published 2026-02-10 · Updated 2026-03-19 · CVE-2026-0667

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Schneider Electric SCADAPack 47xi, SCADAPack 47x and SCADAPack 57x (affected versions not specified)

Description A flaw exists in the firmware of Schneider Electric industrial controllers. This issue involves insufficient validation of unusual or exceptional conditions. Successful exploitation could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. The vulnerability could allow for unauthorized code execution over Modbus TCP.

Recommendations Update to firmware version 9.12.2 (R3.4.2). Implement network segmentation. Use an RTU firewall.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2026-01897

CVE-2026-0667

Affected Products

Scadapack 47Xi

Scadapack Remoteconnect

Scadapack47X

References · 6

• https://bdu.fstec.ru/vul/2026-01897 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdf · Note
• https://se.com/ww/en/work/support/cybersecurity/security-notifications.jsp · Note
• https://twitter.com/StrongKeepCyber/status/2034117808896774409 · Twitter Post
• https://twitter.com/eyalestrin/status/2034674581877989440 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2034261538899624441 · Twitter Post