CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 7 November 2026 at 20:32.
Filters
1 active1 advisories found
SEVD-2026-132-03
Improper Limitation of a Pathname to a Restricted Directory vulnerability on Remote Terminal Unit and Controller Products
Schneider Electric — EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller
Published
12 May 2026
Last update
12 May 2026
Linked CVEs
Affected sectors
, Transmissie, Energieopwekking
Risk evaluation
Schneider Electric is aware of a vulnerability in its EasyLogic T150 (formerly known as Saitel DR) and Saitel DP Remote Terminal Unit & Controller products. The [EasyLogic T150 (formerly known as Saitel DR RTU)](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=62685#overview) is a field device, offering a solid and powerful modular platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The [Saitel DP RTU](https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61747) is a modular platform for medium voltage and high voltage public distribution and transmission substation control. Failure to apply the fix provided below may risk a path traversal–based attack in which an authenticated user could gain unauthorized file access.
Mitigation summary
Version 11.06.32 of EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller includes a fix for this vulnerability and is available for download here: • Contact Schneider Electric’s Customer Care Center to download this firmware. • Reboot needed: Yes
Revision history (1)
Initial publication — 12 May 2026
Original Release