vulnerability
Schneider Electric EasyLogic T150 and Saitel DP
High
Summary
This advisory details a vulnerability (CVE-2026-6865) affecting Schneider Electric’s EasyLogic T150 and Saitel DP Remote Terminal Units & Controllers. The vulnerability, a CWE-22 ‘Path Traversal’ flaw, allows an attacker to potentially gain unauthorized access to sensitive files if user-supplied input is not properly handled during file path processing. Schneider Electric has released firmware updates (versions 11.06.32 and 11.06.37) to address this issue, and recommends implementing additional security controls like strict credential management and isolation.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data