Schneider Electric Easylogic T150 Remote Terminal Unit Controller vulnerabilities

CVE-2026-9650 [HIGH] CWE-522 CVE-2026-9650: CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

CVE-2026-6865 [HIGH] CWE-22 CVE-2026-6865: CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

CVE-2026-9651 [MEDIUM] CWE-732 CVE-2026-9651: CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unautho CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.