This vulnerability involves improper limitation of a pathname to a restricted directory in Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller. Specifically, user input used in file path processing on the server side is not properly sanitized or restricted, enabling an attacker with low privileges to potentially access sensitive files outside the intended directory. The affected versions include 11.06.31 and earlier. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, high impact on confidentiality, low impact on integrity, and no impact on availability.

Successful exploitation could lead to unauthorized disclosure of sensitive files on the affected device, potentially exposing confidential information. The impact is primarily on confidentiality with high confidence. There is no indication of impact on system integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor Schneider Electric advisories for updates. Until a patch is available, restrict network access to the affected devices to trusted users only and consider additional network-level controls to limit exposure.