Scadapack 47Xi
Monthly
Credential interception vulnerability in Schneider Electric SCADAPack RTUs (Remote Terminal Units) exposes authentication information over the network, enabling unauthorized access to RTU functionality. Affected products span the SCADAPack 3xx, 32, 47x/470R, and 57x families - all version ranges per CPE wildcards - used extensively in critical infrastructure sectors such as oil and gas pipelines, water systems, and electrical utilities. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but successful exploitation yields full credential disclosure and subsequent unauthorized control of industrial RTU assets.
Credential interception vulnerability in Schneider Electric SCADAPack RTUs (Remote Terminal Units) exposes authentication information over the network, enabling unauthorized access to RTU functionality. Affected products span the SCADAPack 3xx, 32, 47x/470R, and 57x families - all version ranges per CPE wildcards - used extensively in critical infrastructure sectors such as oil and gas pipelines, water systems, and electrical utilities. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but successful exploitation yields full credential disclosure and subsequent unauthorized control of industrial RTU assets.