CVEvulnerability

CVE-2026-9651

6.7 MEDIUM Published 2026-06-25 Modified 2026-07-14 Official page ↗
Status
Analyzed
Published
2026-06-25
Last modified
2026-07-14
Assigner
[email protected]
CVSS 4.0 ([email protected])
6.7 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-732

Description

CWE-732 Incorrect Permission Assignment for Critical Resource vulnerability that could cause unauthorized disclosure of password hashes and potential account compromise when an attacker with privileged local access reads improperly protected system files.

Affected configurations

• schneider-electric easylogic t150 firmware (< 11.06.32) • schneider-electric saitel dp firmware (< 11.06.38)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References