Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller | Versions 11.06.31 and prior | — |
| Schneider Electric | Saitel DP Remote Terminal Unit & Controller | Versions 11.06.36 and prior | — |
Advisories 2
- ICSA-26-169-04 Schneider Electric EasyLogic T150 and Saitel DP CISA ICS & IT advisories · Jun 18, 2026
- SEVD-2026-132-03 Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products Schneider Electric CPCERT · May 12, 2026