RemoteConnect vulnerabilities

2 known vulnerabilities in RemoteConnect from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  SCADAPack 47x: Improper Check for Unusual or Exceptional Conditions

  CVE-2026-0667Jul 29, 2026Schneider Electric

  CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.

• 9.8 Critical severity

  Xmill: Out-of-bounds Write

  CVE-2022-26507Apr 14, 2022AttEPSS 2.42%

  A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21