CISA 2026-09-15

Schneider Electric SCADAPack x70 Products

CVE-2026-81861

Machine-generated analysis · WAYSCloud LLM

All listed SCADAPack x70 models are affected by CVE-2026-81861. The advisory recommends using RBAC instead of the Secure Lock feature.

Context

The affected products are Schneider Electric SCADAPack x70 Remote Terminal Units, including models 47x, 47xi, 47xd, 470R, 57x, 3xx and 32. The advisory states an insufficiently protected credentials vulnerability (CVE-2026-81861) could expose authentication information and allow unauthorized RTU configuration changes via Secure Lock. The advisory notes the devices are deployed worldwide in critical manufacturing and energy sectors. It advises implementing Role-Based Access Control as a mitigation.

Operator considerations

Check: inventory all SCADAPack x70 devices and their firmware versions.
Isolate: segment RTU traffic from broader networks where feasible.
Patch: enable and configure RBAC per Schneider Electric security guidelines, disabling Secure Lock.
Log: monitor authentication attempts and any use of the Secure Lock feature.

From Cybersecurity and Infrastructure Security Agency ↗

Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the mitigations provided below may increase the risk of unauthorized access to RTU configuration through the Secure Lock functionality, potentially resulting in a loss of confidentiality.

The following versions of Schneider Electric SCADAPack x70 Products are affected:

SCADAPack 47x vers:all/* (CVE-2026-81861)

SCADAPack 47xi vers:all/* (CVE-2026-81861)

SCADAPack 47xd vers:all/* (CVE-2026-81861)

SCADAPack 470R vers:all/* (CVE-2026-81861)

SCADAPack 57x vers:all/* (CVE-2026-81861)

SCADAPack 3xx vers:all/* (CVE-2026-81861)

SCADAPack 32 vers:all/* (CVE-2026-81861)

Vendor

Equipment

Schneider Elec...

Read the full advisory on CISA →