As cited
Copy frozen at (site build).
vulnerabilities
Schneider Electric SCADAPack x70 Products
Schneider Electric disclosed CVE-2026-81861, an insufficiently protected credentials vulnerability affecting multiple SCADAPack x70 remote terminal unit products across all versions. The vulnerability could expose authentication information and allow unauthorized access to RTU configuration through the legacy Secure Lock feature. Schneider Electric recommends implementing role-based access control (RBAC), network segmentation, RTU firewall services, and securing remote access with virtual private networks (VPNs).
Why it matters: Industrial organizations and critical infrastructure operators using SCADAPack x70 devices in manufacturing and energy sectors need to evaluate their RTU configurations and consider migrating from Secure Lock to RBAC controls to prevent unauthorized access to supervisory control systems.
- Source published
- First seen by Cybersecurity Tracker