Back to CVE records
Medium 6.9Published Apr 14, 2026
CVE-2026-4832CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.
Updated under an hour ago ()
Does this affect you?
It affects Schneider Electric Easergy MiCOM P14x and 11 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.
- CVSS
- 6.9 MEDIUM (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- Weakness (CWE)
- CWE-798
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- schneider
- NVD analysis
- Undergoing Analysis
- Record last updated
- Apr 14, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Schneider Electric Easergy MiCOM P14x schneider_electric:easergy_micom_p14x (from the name) | All versions prior to B4A | CNA record |
Schneider Electric Easergy MiCOM P24x schneider_electric:easergy_micom_p24x (from the name) | All versions prior to D3A | CNA record |
Schneider Electric Easergy MiCOM P341 schneider_electric:easergy_micom_p341 (from the name) | All versions prior to E3F | CNA record |
Schneider Electric Easergy MiCOM P342, P343, P344, P345 schneider_electric:easergy_micom_p342_p343_p344_p345 (from the name) | All versions prior to B3F | CNA record |
Schneider Electric Easergy MiCOM P442, P444 schneider_electric:easergy_micom_p442_p444 (from the name) | All versions prior to E3A | CNA record |
Schneider Electric Easergy MiCOM P443, P445, P446, P543, P544, P545, P546 schneider_electric:easergy_micom_p443_p445_p446_p543_p544_p545_p546 (from the name) | All versions prior to H6A | CNA record |
Schneider Electric Easergy MiCOM P642, P645 schneider_electric:easergy_micom_p642_p645 (from the name) | All versions prior to B4A | CNA record |
Schneider Electric Easergy MiCOM P643 schneider_electric:easergy_micom_p643 (from the name) | All versions prior to B3F | CNA record |
Schneider Electric Easergy MiCOM P741, P742, P743 schneider_electric:easergy_micom_p741_p742_p743 (from the name) | All versions prior to B2A | CNA record |
Schneider Electric Easergy MiCOM P746 schneider_electric:easergy_micom_p746 (from the name) | All versions prior to B4E or C4E | CNA record |
Schneider Electric Easergy MiCOM P841 schneider_electric:easergy_micom_p841 (from the name) | All versions prior to G6A | CNA record |
Schneider Electric Easergy MiCOM P849 schneider_electric:easergy_micom_p849 (from the name) | All versions prior to B4A | CNA record |
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-03.pdf
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.