← Back

CVE-2026-9651

nvd nist
Published: Jun 25, 2026Modified: Jul 14, 2026

JSON object

Loading...
6.7
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: cybersecurity@se.com (Secondary)

Description

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

Affected (2)

Schneider Electric
2 products
Easylogic T150 Firmware
Saitel Dp Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Easylogic T150 Firmware
Before 11.06.32
Running on/withPlatform Versions
Schneider Electric
Easylogic T150
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Saitel Dp Firmware
Before 11.06.38
Running on/withPlatform Versions
Schneider Electric
Saitel Dp
All versions

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: cybersecurity@se.com
Vendor Advisory

Timeline

No history available yet.