This vulnerability, classified as CWE-522 (Insufficiently Protected Credentials), affects Schneider Electric SCADAPack 47x devices. It involves inadequate protection of authentication credentials, which could result in their exposure and unauthorized access to RTU functions. The CVSS 4.0 base score is 5.9, indicating a medium severity level. There is no information on affected versions or available patches, and no known exploits in the wild have been reported.

If exploited, this vulnerability could allow attackers to obtain authentication credentials and gain unauthorized access to the SCADAPack 47x RTU functionality. This could compromise the integrity and availability of the affected devices. However, no active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are available, monitor Schneider Electric advisories for updates and apply recommended security controls specific to credential protection as advised by the vendor.