Path Traversal in Schneider Electric Easylogic T150 (Formerly Saitel Dr) Remote Terminal Unit & Controller
CVE-2026-6865
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (35.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 35th percentile — 35.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.004 · change: +0.001
Affected products
- Schneider Electric Easylogic T150 (Formerly Saitel Dr) Remote Terminal Unit & Controller — versions Versions 11.06.31 and prior
- Schneider Electric Saitel Dp Remote Terminal Unit & Controller — versions Versions 11.06.36 and prior