Schneider Electric EasyLogic T150 and Saitel DP RTU
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview) is a field device, offering a solid and powerful modular platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The [Saitel DP RTU](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747) is a modular platform for medium voltage and high voltage public distribution and transmission substation control. Failure to apply the mitigations provided below may risk credential harvesting and unauthorized access attacks, which could result in exposure of sensitive information and compromise of device integrity and operations when an attacker has subsequent physical access to the device.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-9651US | medium4.4 | — | ||
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an att… | ||||
| CVE-2026-9650US | high7.5 | — | ||
CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credent… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Multiple Vulnerabilities on EasyLogic T150 and Saitel DP RTU - SEVD-2026-160-02 PDF Versionself
- Multiple Vulnerabilities on EasyLogic T150 and Saitel DP RTU - SEVD-2026-160-02 CSAF Versionself
- ICS Advisory ICSA-26-181-04 JSONself
- ICS Advisory ICSA-26-181-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- BehobenFirmware Versions 11.06.30 and prior installed on EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Version 11.06.32 of EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller includes a fix for these vulnerabilities and is available:• Contact Schneider Electric’s Customer Care Center to download this firmware.• Reboot needed: Yes.
- BehobenFirmware Versions 11.06.31 and prior installed on EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Version 11.06.32 of EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller includes a fix for these vulnerabilities and is available:• Contact Schneider Electric’s Customer Care Center to download this firmware.• Reboot needed: Yes.
- BehobenFirmware Versions 11.06.35 and prior installed on Saitel DP Remote Terminal Unit & Controller
Version 11.06.38 of SAITEL DP Remote Terminal Unit & Controller includes a fix for these vulnerabilities and is available:• Contact Schneider Electric’s Customer Care Center to download this firmware.• Reboot needed: Yes.
- BehobenFirmware Versions 11.06.37 and prior installed on Saitel DP Remote Terminal Unit & Controller
Version 11.06.38 of SAITEL DP Remote Terminal Unit & Controller includes a fix for these vulnerabilities and is available:• Contact Schneider Electric’s Customer Care Center to download this firmware.• Reboot needed: Yes.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan