This advisory covers multiple vulnerabilities identified in Schneider Electric EasyLogic T150 and Saitel DP RTU products, specifically versions up to 11.06.30. The vulnerabilities are associated with CWE-522 (Insufficiently Protected Credentials) and CWE-732 (Incorrect Permission Assignment for Critical Resource). The vendor has not provided explicit patch information or detailed technical exploit data. The advisory focuses on recommended cybersecurity best practices to mitigate risks, such as network segmentation, physical security controls, and secure remote access methods. No known exploits are reported in the wild.

The vulnerabilities potentially allow unauthorized access or misuse of control and safety system components due to insufficient credential protection and improper permission assignments. This could lead to unauthorized control or disruption of industrial processes if exploited. However, no specific impact scenarios or exploit details are provided in the advisory.

No official patch or fix is currently indicated. The vendor recommends following established cybersecurity best practices, including isolating control networks behind firewalls, enforcing physical access controls, securing programming modes, restricting network connections for programming software, sanitizing removable media, minimizing network exposure, and using secure remote access methods such as VPNs. These mitigations aim to reduce the attack surface and prevent unauthorized access. Patch status is not yet confirmed — check the vendor advisory SEVD-2026-160-02 for updates.