CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts.

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts.

Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) products. The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and transmission network management. Failure to apply the remediations provided below may risk arbitrary code execution & privilege escalation which could result in denial of service, loss of confidentiality, and integrity of the device.

Schneider Electric is aware of a vulnerability in its Saitel DR & Saitel DP RTU (Remote Terminal Unit) products. The Saitel DR RTU is a field device, offering a solid and powerful platform for data acquisition, communication, automation and IED integration for distribution and transmission networks, generation sector and railway. The Saitel DP RTU is a modular platform for medium voltage and low voltage public distribution and transmission network management. Failure to apply the remediations provided below may risk arbitrary code execution & privilege escalation which could result in denial of service, loss of confidentiality, and integrity of the device.