Summary
Schneider Electric is aware of vulnerabilities in its Saitel DR & Saitel DP RTU (Remote Terminal Unit)
product(s).
The Saitel DR RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview is a field device, offering a solid and powerful platform for data acquisition, communication,
automation and IED integration for distribution and transmission networks, generation sector and railway.
The Saitel DP RTU https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747 is a modular platform for medium voltage and low voltage public distribution and
transmission network management.
Failure to apply the remediations provided below may risk command injection attack, which could result in
arbitrary code execution.
Vulnerabilities 2
-
Medium 5.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
-
Medium 5.8
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
Revision history
-
#1.0.0
Original Release
References
-
Saitel DR & Saitel DP Remote Terminal Unit - SEVD-2025-252-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-02.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/