Summary
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel
DP Remote Terminal Unit & Controller products.
The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview) is a field device, offering a solid and powerful
modular platform for data acquisition, communication, automation and IED integration for distribution and
transmission networks, generation sector and railway.
The [Saitel DP RTU](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747) is a modular platform for medium voltage and high voltage public distribution and
transmission substation control.
Failure to apply the mitigations provided below may risk credential harvesting and unauthorized access
attacks, which could result in exposure of sensitive information and compromise of device integrity and
operations when an attacker has subsequent physical access to the device.
Vulnerabilities 2
-
High 8.7
CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensiti…
-
Medium 6.7
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of…
Revision history
-
#2
Initial CISA Republication of Schneider Electric CPCERT SEVD-2026-160-02 advisory
-
#1
Original Release
References
-
Multiple Vulnerabilities on EasyLogic T150 and Saitel DP RTU - SEVD-2026-160-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-02.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/ww/en/download/document/7EN52-0390/
-
ICS Advisory ICSA-26-181-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-04
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b