This vulnerability, classified as CWE-732, concerns improper permission settings on critical system files within the EasyLogic T150 device. An attacker who already has privileged local access can exploit this misconfiguration to access password hashes stored in these files. The CVSS 4.0 base score is 6.7, reflecting a medium severity with local attack vector, low attack complexity, and no user interaction required. The vulnerability does not affect cloud services and no known exploits are reported in the wild. No affected versions or patch information have been disclosed.

If exploited, the vulnerability could allow an attacker with privileged local access to obtain password hashes from the system files, potentially leading to account compromise. This elevates the risk of unauthorized access within the affected device environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict privileged local access to trusted personnel only and monitor for unauthorized access attempts. No official remediation or temporary fix is currently documented by Schneider Electric.