Schneider Electric EasyLogic T150 and Saitel DP
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview) is a field device, offering a solid and powerful modular platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The [Saitel DP RTU](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747) is a modular platform for medium voltage and high voltage public distribution and transmission substation control. Failure to apply the fix provided below may risk a path traversal–based attack in which an authenticated user could gain unauthorized file access.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-6865US | — | — | ||
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied inpu… | ||||
references
External citations — patches, advisories, analysis.
- Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products - SEVD-2026-132-03 PDF Versionself
- Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products - SEVD-2026-132-03 CSAF Versionself
- ICS Advisory ICSA-26-169-04 JSONself
- ICS Advisory ICSA-26-169-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationFirmware Versions 11.06.31 and prior installed on EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Ensure strict credential controls, even for low privilege users. • Ensure isolation and credentials are in place, as per the product’s security recommendations.
- MitigationFirmware Versions 11.06.36 and prior installed on Saitel DP Remote Terminal Unit & Controller
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Ensure strict credential controls, even for low privilege users. • Ensure isolation and credentials are in place, as per the product’s security recommendations.
- FixedFirmware Versions 11.06.31 and prior installed on EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Version 11.06.32 of EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller includes a fix for this vulnerability and is available for download here: • Contact Schneider Electric’s Customer Care Center to download this firmware. • Reboot needed: Yes
- FixedFirmware Versions 11.06.36 and prior installed on Saitel DP Remote Terminal Unit & Controller
Version 11.06.37 of Saitel DP Remote Terminal Unit & Controller includes a fix for this vulnerability and is available for download here: • Contact Schneider Electric’s Customer Care Center to download this firmware. • Reboot needed: Yes
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan