Insufficient Verification of Data Authenticity in Schneider Electric Products
CVE-2026-102250

8.6HIGH

Key Information:

Vendor

Schneider Electric
Status
Sage Rtu 1410
Sage Rtu 1430
Sage Rtu 1450
Sage Rtu 2400
Vendor
CVE Published:
13 October 2026

What is CVE-2026-102250?

An insufficient verification of data authenticity vulnerability could allow an attacker to upload modified firmware during a firmware update process. This occurs when an authorized admin user initiates the update, which may lead to unauthorized control over affected Schneider Electric devices. It highlights the critical importance of robust data integrity checks in firmware update procedures to prevent exploitation.

Affected Version(s)

Sage RTU 1410 All versions prior to version C3414-500-S02L0

Sage RTU 1430 All versions prior to version C3414-500-S02L0

Sage RTU 1450 All versions prior to version C3414-500-S02L0

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.