[CVE-2026-9650] CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and …

Descripción técnica

CWE-522 Insufficiently Protected Credentials vulnerability that could cause unauthorized access and exposure of sensitive information when unauthenticated attacker accesses credentials stored within firmware or system files. With this credential an attacker could subsequently compromise the device if they have physical access to the device.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Easylogic t150 firmware, Easylogic t150, Saitel dp firmware, Saitel dp — Schneider-electric

Debilidades (CWE)

CWE-522

Fuente oficial

Publicado en NIST NVD.