CVE-2026-81861
Received Received - Intake

Insufficiently Protected Credentials in RTU Firmware

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: Schneider Electric SE

Description
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-81861
EUVD
EUVD-2026-76131

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
schneider_electric scadapack_47x *
schneider_electric scadapack_47xi *
schneider_electric scadapack_47xd *
schneider_electric scadapack_470r *
schneider_electric scadapack_57x *
schneider_electric scadapack_3xx *
schneider_electric scadapack_32 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Insufficiently Protected Credentials issue (CWE-522) in Schneider Electric's SCADAPack x70 product line. It allows exposure of authentication information, potentially leading to unauthorized access to RTU (Remote Terminal Unit) functionality through the Secure Lock feature.

Impact Analysis

An attacker could exploit this flaw to gain unauthorized access to RTU configuration, compromising system confidentiality and potentially allowing control over industrial processes. This could lead to operational disruptions or safety risks in affected environments.

Compliance Impact

This vulnerability may violate compliance requirements for data protection and access control, such as GDPR (data confidentiality) or HIPAA (secure access to sensitive systems). Unauthorized access risks could lead to regulatory penalties or breaches of compliance standards.

Mitigation Strategies

Implement Role-Based Access Control (RBAC) instead of the legacy Secure Lock feature for SCADAPack 47x devices. Configure network segmentation and enable the RTU firewall service. For SCADAPack 57x, 3xx, and 32, apply network segmentation and firewall services. Isolate control systems behind firewalls, restrict physical access, avoid internet exposure, and use secure remote access methods like VPNs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81861. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart