The vulnerability is an insufficiently protected credentials flaw that allows an unauthenticated attacker to retrieve credentials from firmware or system files. With those credentials, an attacker who can physically reach the device can log in and take full control, potentially altering configuration, exfiltrating data, or causing operational disruption. The flaw enables the attacker to bypass normal authentication mechanisms, effectively compromising the device at a trust level that otherwise would require legitimate access.

Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller and Schneider Electric Saitel DP Remote Terminal Unit & Controller are the affected products. No specific firmware or software version numbers are listed in the advisory, so all deployed units could be vulnerable until an update is applied.

The CVSS score of 8.7 marks a high severity, and the vulnerability is not listed in CISA’s KEV catalog, indicating no known large‑scale exploitation. The EPSS value is unavailable, but the vendor notes that only an attacker who already has physical access to the unit can use the retrieved credentials to compromise it. Thus the risk is primarily limited to environments where the units are reachable physically or exposed to a local network that can be breached. No public exploit has been reported; however, the high CVSS rating means diligent assessment and mitigation are recommended.