Easylogic T150 Firmware CVEs and Security Vulnerabilities

CVE-2026-9650

Unauthorized access via exposed firmware credentials in Schneider Electric remote terminals

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Schneider-electric Schneider Electric

Products

Easylogic T150 Easylogic T150 Firmware Saitel Dp and 3 more

CVE-2026-9651

Permission Assignment Flaw Exposes Password Hashes in Schneider Electric Remote Terminals

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed