MEDIUM CWE-732
CVE-2026-9651
Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller vulnerability
Schneider Electric·EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
6.7/ 10
CVSS 4.0
Medium severity
0.16%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 5% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jun 25, 2026
- Updated
- Jun 25, 2026
- First covered
- Jul 3, 2026
- Latest story
- 4 months ago
Summary
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.
CWE-732Incorrect Permission Assignment for Critical Resource
Attack profile
Attack vectorLocal
ComplexityLow
RequirementsNone
PrivilegesHigh
User interactionNone
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NAffected products
- Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & ControllerVersion 11.06.31 and prior
- Schneider Electric Saitel DP Remote Terminal Unit & ControllerVersion 11.06.37 and prior