Schneider Electric flags data authenticity flaw in Sage remote terminal units

What happened. Schneider Electric reported a flaw in several Sage remote terminal unit (RTU) products, described as insufficient verification of data authenticity. Versions before C3414-500-S02L0 are affected. The Canadian Cyber Centre urges users to review the advisory and apply updates.

Who is affected. Schneider Electric Sage RTU 1410, 1430, 1450, 2400, 3030 Magnum and 4400, in versions prior to C3414-500-S02L0.

What to do. Check whether you run these Sage RTU models on versions before C3414-500-S02L0. Apply the Schneider Electric updates and suggested mitigations from the advisory.