CVE Explorer
CVE-2026-9651
CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
affected · 2 assertions
{"defaultStatus":"unaffected","product":"Saitel DP Remote Terminal Unit & Controller","vendor":"Schneider Electric","versions":[{"status":"affected","version":"Version 11.06.37 and prior"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller","vendor":"Schneider Electric","versions":[{"status":"affected","version":"Version 11.06.31 and prior"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/affected/0
Affected products and versions
2 source assertions{"defaultStatus":"unaffected","product":"Saitel DP Remote Terminal Unit & Controller","vendor":"Schneider Electric","versions":[{"status":"affected","version":"Version 11.06.37 and prior"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller","vendor":"Schneider Electric","versions":[{"status":"affected","version":"Version 11.06.31 and prior"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.7,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"…
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-732","description":"CWE-732 Incorrect Permission Assignment for Critical Resource","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-02.pdf"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:99cf6f1d2cd4aa3048141aa4999567a1cd27d5e3e580ec9f8815ae35c467569d · sha256:5234bce96773313f… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.