Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-9650

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller

Default version status: unaffected

  • Version 11.06.30 and prioraffected

Schneider Electric Saitel DP Remote Terminal Unit & Controller

Default version status: unaffected

  • Version 11.06.35 and prioraffected

References