Schneider Electric EasyLogic T150 and Saitel DP
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview) is a field device, offering a solid and powerful modular platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The [Saitel DP RTU](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747) is a modular platform for medium voltage and high voltage public distribution and transmission substation control. Failure to apply the fix provided below may risk a path traversal–based attack in which an authenticated user could gain unauthorized file access.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-6865US | — | — | ||
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied inpu… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products - SEVD-2026-132-03 PDF Versionself
- Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products - SEVD-2026-132-03 CSAF Versionself
- ICS Advisory ICSA-26-169-04 JSONself
- ICS Advisory ICSA-26-169-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationFirmware Versions 11.06.31 and prior installed on EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Ensure strict credential controls, even for low privilege users. • Ensure isolation and credentials are in place, as per the product’s security recommendations.
- MitigationFirmware Versions 11.06.36 and prior installed on Saitel DP Remote Terminal Unit & Controller
If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit: • Ensure strict credential controls, even for low privilege users. • Ensure isolation and credentials are in place, as per the product’s security recommendations.
- BehobenFirmware Versions 11.06.31 and prior installed on EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Version 11.06.32 of EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller includes a fix for this vulnerability and is available for download here: • Contact Schneider Electric’s Customer Care Center to download this firmware. • Reboot needed: Yes
- BehobenFirmware Versions 11.06.36 and prior installed on Saitel DP Remote Terminal Unit & Controller
Version 11.06.37 of Saitel DP Remote Terminal Unit & Controller includes a fix for this vulnerability and is available for download here: • Contact Schneider Electric’s Customer Care Center to download this firmware. • Reboot needed: Yes
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan