Description
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and
arbitrary code execution when a privileged engineer user with console access modifies a configuration file
used by a root-level daemon to execute custom scripts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Saitel DR RTU | Versions 11.06.29 and prior | — |
| Schneider Electric | Saitel DP RTU | Versions 11.06.34 and prior | — |
Advisories 2
- SEVD-2025-224-01 Saitel DR & Saitel DP Remote Terminal Unit Schneider Electric CPCERT · Nov 11, 2025
- ICSA-25-240-03 Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit CISA ICS & IT advisories · Aug 12, 2025