Paper/Archive/CVE-2026-0667

CVE-2026-0667

Schneider Electric SCADAPack 47x — CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service…

EPSS 0.5%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 44.9.449 × 209.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.

Affected

ProductAffectedFixed inSource

SCADAPack 47xVersions prior to R3.4.2 (Firmware version prior to 9.12.2)–CNA

SCADAPack 47xiVersions prior to R3.4.2 (Firmware version prior to 9.12.2)–CNA

SCADAPack 57xAll Versions–CNA

RemoteConnectVersions prior to R3.4.2–CNA

Scores by source

schneider (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdownload.se.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdf