Vulnerabilities

CVSS

4.4 Medium

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Risk score

35.2

Published

2026-06-25

Status

Analyzed

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

Weaknesses

CWE-732

Coverage 1

vulnerability

Schneider Electric EasyLogic T150 and Saitel DP RTU

This advisory details vulnerabilities in Schneider Electric's EasyLogic T150 and Saitel DP RTU devices, specifically versions through 11.06.37. These vulnerabilities, classified as CWE-522 and CWE-732, allow for unauthor…

CISA Advisories · Jun 30, 2026 Medium

CVE-2026-9650CVE-2026-9651FRcredentialsfirmwareiot

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-02&p_e...