Description

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

Severity (CVSS)

Base score6.7
SeverityMedium
VersionCVSS 4.0
VectorCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Provided byCNA

Weaknesses

  • CWE-732 — CWE-732 Incorrect Permission Assignment for Critical Resource

Affected products

VendorProductVersions
Schneider ElectricEasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & ControllerVersion 11.06.31 and prior
Schneider ElectricSaitel DP Remote Terminal Unit & ControllerVersion 11.06.37 and prior

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 26 Jun 2026 07:05 UTC.