Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk score

60.0

Published

2026-06-25

Status

Analyzed

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

Weaknesses

CWE-522

Coverage 1

vulnerability

Schneider Electric EasyLogic T150 and Saitel DP RTU

This advisory details vulnerabilities in Schneider Electric's EasyLogic T150 and Saitel DP RTU devices, specifically versions through 11.06.37. These vulnerabilities, classified as CWE-522 and CWE-732, allow for unauthor…

CISA Advisories · Jun 30, 2026 Medium

CVE-2026-9650CVE-2026-9651FRcredentialsfirmwareiot

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-02&p_e...