Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2026-9651

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an att

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller

Default version status: unaffected

  • Version 11.06.31 and prioraffected

Schneider Electric Saitel DP Remote Terminal Unit & Controller

Default version status: unaffected

  • Version 11.06.37 and prioraffected

References