HIGH CWE-522
CVE-2026-9650
Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller vulnerability
Schneider Electric·EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
8.7/ 10
CVSS 4.0
High severity
0.41%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 35% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jun 25, 2026
- Updated
- Jun 25, 2026
- First covered
- Jul 3, 2026
- Latest story
- 4 months ago
Summary
CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.
CWE-522Insufficiently Protected Credentials
Attack profile
Attack vectorNetwork
ComplexityLow
RequirementsNone
PrivilegesNone
User interactionNone
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NAffected products
- Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & ControllerVersion 11.06.30 and prior
- Schneider Electric Saitel DP Remote Terminal Unit & ControllerVersion 11.06.35 and prior