CVE-2026-9650: schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller Insufficiently Protected Credentials

Vulnerability summary

CVE-2026-9650 is a high (CVSS 8.7) Insufficiently Protected Credentials vulnerability in schneider electric easylogic t150 (formerly saitel dr) remote terminal unit & controller. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.7% of scored vulnerabilities.

Timeline

1. 25-06-2026
   PublishedVulnerability first disclosed.
2. 25-06-2026
   Last modifiedVulnerability information updated.

Description

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

• CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.