Summary
Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit)
products.
The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication,
automation and IED integration for distribution and transmission networks, generation sector and railway.
The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and
transmission network management.
Failure to apply the remediations provided below may risk arbitrary code execution & privilege escalation which
could result in denial of service, loss of confidentiality, and integrity of the device.
Vulnerabilities 1
-
Medium 6.7
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code ex…
Revision history
-
#2.0.0
A remediation is available for Saitel DP RTU.
-
#1.0.1
Fixed Remediation URL.
-
#1.0.0
Original Release
References
-
Saitel DR & Saitel DP Remote Terminal Unit - SEVD-2025-224-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-224-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-224-01.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/in/en/download/document/7EN52-0390/