Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity whe

Description

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric SCADAPack 47x

Default version status: unaffected

  • Versions prior to R3.4.2 (Firmware version prior to 9.12.2)affected

Schneider Electric SCADAPack 47xi

Default version status: unaffected

  • Versions prior to R3.4.2 (Firmware version prior to 9.12.2)affected

Schneider Electric SCADAPack 57x

Default version status: unaffected

  • All Versionsaffected

Schneider Electric RemoteConnect

Default version status: unaffected

  • Versions prior to R3.4.2affected

References