CVE-2026-9650

HIGH

Schneider Electric EasyLogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller - Insufficiently Protected Credentials

Title source: rule
STIX 2.1

Description

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0024
EPSS Percentile 15.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-522
Status published
Products (4)
Schneider Electric/EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller Version 11.06.30 and prior
Schneider Electric/Saitel DP Remote Terminal Unit & Controller Version 11.06.35 and prior
schneider-electric/easylogic_t150_firmware < 11.06.32
schneider-electric/saitel_dp_firmware < 11.06.38
Published Jun 25, 2026
Tracked Since Jun 25, 2026