Summary
Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit)
products.
The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication,
automation and IED integration for distribution and transmission networks, generation sector and railway.
The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and
transmission network management.
Failure to apply the remediations provided below may risk arbitrary code execution & privilege escalation which
could result in denial of service, loss of confidentiality, and integrity of the device.
Vulnerabilities 1
-
Medium 6.7
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code ex…
Revision history
-
#1.0.0
Original Release
References
-
Saitel DR & Saitel DP Remote Terminal Unit - SEVD-2025-224-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=sevd-2025-224-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/in/en/download/document/7EN52-0390/
-
ICS Advisory ICSA-25-240-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-03
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B