CVE-2021-22816: Schneider Electric Scadapack 312e Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E and 357E RTUs with firmware V8.18.1 and prior

Affected products

• Schneider Electric Scadapack 312e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 313e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 314e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 330e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 333e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 334e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 337e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 350e Firmware: before 8.19.1 (fixed in 8.19.1)
• Schneider Electric Scadapack 357e Firmware: before 8.19.1 (fixed in 8.19.1)

Published 2022-01-28. Last modified 2026-06-17.