Vulnerability-Lookup

CVE-2026-4832 (GCVE-0-2026-4832)

Vulnerability from cvelistv5 – Published: 2026-04-14 15:05 – Updated: 2026-04-14 18:16

Summary

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-14 18:15 UTC

CWE

CWE-798 - Use of Hard-Coded Credentials

Assigner

schneider CNA under the mitre root

CNA scorecard C 65/100 over 20 records in the last 180 days details

References

1 reference

URL	Tags
https://download.schneider-electric.com/files?p_D…

Impacted products

12 products

Vendor	Product	Version	CPE status
Schneider Electric	Easergy MiCOM P14x	Affected: All versions prior to B4A	guessed
Schneider Electric	Easergy MiCOM P24x	Affected: All versions prior to D3A	guessed
Schneider Electric	Easergy MiCOM P341	Affected: All versions prior to E3F	guessed
Schneider Electric	Easergy MiCOM P342, P343, P344, P345	Affected: All versions prior to B3F	guessed
Schneider Electric	Easergy MiCOM P442, P444	Affected: All versions prior to E3A	guessed
Schneider Electric	Easergy MiCOM P443, P445, P446, P543, P544, P545, P546	Affected: All versions prior to H6A	guessed
Schneider Electric	Easergy MiCOM P642, P645	Affected: All versions prior to B4A	guessed
Schneider Electric	Easergy MiCOM P643	Affected: All versions prior to B3F	guessed
Schneider Electric	Easergy MiCOM P741, P742, P743	Affected: All versions prior to B2A	guessed
Schneider Electric	Easergy MiCOM P746	Affected: All versions prior to B4E or C4E	guessed
Schneider Electric	Easergy MiCOM P841	Affected: All versions prior to G6A	guessed
Schneider Electric	Easergy MiCOM P849	Affected: All versions prior to B4A	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4832",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-14T18:15:51.123382Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-14T18:16:06.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P14x",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P24x",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to D3A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P341",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to E3F"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P342, P343, P344, P345",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B3F"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P442, P444",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to E3A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P443, P445, P446, P543, P544, P545, P546",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to H6A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P642, P645",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P643",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B3F"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P741, P742, P743",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B2A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P746",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4E or C4E"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P841",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to G6A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P849",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4A"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port."
            }
          ],
          "value": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-Coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-14T15:17:08.719Z",
        "orgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
        "shortName": "schneider"
      },
      "references": [
        {
          "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
    "assignerShortName": "schneider",
    "cveId": "CVE-2026-4832",
    "datePublished": "2026-04-14T15:05:00.845Z",
    "dateReserved": "2026-03-25T14:13:10.490Z",
    "dateUpdated": "2026-04-14T18:16:06.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-4832",
      "date": "2026-11-14",
      "epss": "0.00281",
      "percentile": "0.20882"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P14x",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B4A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P24x",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to D3A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P341",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to E3F"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P342, P343, P344, P345",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B3F"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P442, P444",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to E3A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P443, P445, P446, P543, P544, P545, P546",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to H6A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P642, P645",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B4A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P643",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B3F"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P741, P742, P743",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B2A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P746",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B4E or C4E"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P841",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to G6A"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Easergy MiCOM P849",
                "vendor": "Schneider Electric",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions prior to B4A"
                  }
                ]
              }
            ],
            "source": "cybersecurity@se.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port."
          },
          {
            "lang": "es",
            "value": "Existe una vulnerabilidad CWE-798 de Uso de credenciales codificadas de forma r\u00edgida que podr\u00eda causar acceso no autorizado a informaci\u00f3n sensible del dispositivo cuando un atacante no autenticado es capaz de interrogar el puerto SNMP."
          }
        ],
        "id": "CVE-2026-4832",
        "lastModified": "2026-10-26T21:10:00.170",
        "metrics": {
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cybersecurity@se.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-4832",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-14T18:15:51.123382Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-04-14T16:16:48.167",
        "references": [
          {
            "source": "cybersecurity@se.com",
            "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf"
          }
        ],
        "sourceIdentifier": "cybersecurity@se.com",
        "vulnStatus": "Undergoing Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-798"
              }
            ],
            "source": "cybersecurity@se.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-06-05T19:28:47+00:00",
      "cve": "CVE-2026-4832",
      "id": "CVE-2026-4832",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-4832",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4832.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-4832",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-14T18:15:51.123382Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-14T18:15:58.207Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P14x",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B4A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P24x",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to D3A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P341",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to E3F"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P342, P343, P344, P345",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B3F"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P442, P444",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to E3A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P443, P445, P446, P543, P544, P545, P546",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to H6A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P642, P645",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B4A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P643",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B3F"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P741, P742, P743",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B2A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P746",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B4E or C4E"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P841",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to G6A"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Easergy MiCOM P849",
              "vendor": "Schneider Electric",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions prior to B4A"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port."
                }
              ],
              "value": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "NETWORK",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-798",
                  "description": "CWE-798 Use of Hard-Coded Credentials",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-14T15:17:08.719Z",
            "orgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
            "shortName": "schneider"
          },
          "references": [
            {
              "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 1.0.1"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
        "assignerShortName": "schneider",
        "cveId": "CVE-2026-4832",
        "datePublished": "2026-04-14T15:05:00.845Z",
        "dateReserved": "2026-03-25T14:13:10.490Z",
        "dateUpdated": "2026-04-14T18:16:06.726Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2026-05570 (CVE-2026-4832)

Vulnerability from fstec – Published: 2026-04-20 – Updated: 2026-04-20 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения устройств релейной защиты и управления Schneider Electric Easergy, связанная с использованием предустановленных учетных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Summary

Уязвимость микропрограммного обеспечения устройств релейной защиты и управления Schneider Electric Easergy связана с использованием предустановленных учетных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации

Severity

5.0 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.9 (Medium) CVSS 4.0


                      
                        CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Authentication bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-798 - Жесткое кодирование регистрационных данных

Aliases

CVE-2026-4832

References

1 reference

URL
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03&p_enDo…

Impacted products

26 products from 1 vendor

Vendors

Schneider Electric

Products

Easergy MiCOM P14x, Easergy MiCOM P24x, Easergy MiCOM P341, Easergy MiCOM P342, Easergy MiCOM P343, Easergy MiCOM P344, Easergy MiCOM P345, Easergy MiCOM P442, Easergy MiCOM P444, Easergy MiCOM P443, Easergy MiCOM P445, Easergy MiCOM P543, Easergy MiCOM P446, Easergy MiCOM P545, Easergy MiCOM P546, Easergy MiCOM P841, Easergy MiCOM P643, Easergy MiCOM P642, Easergy MiCOM P645, Easergy MiCOM P741, Easergy MiCOM P742, Easergy MiCOM P743, Easergy MiCOM P746, Easergy MiCOM P747, Easergy MiCOM P849, Easergy MiCOM Px40 Series

Versions

до D3A (Easergy MiCOM P14x), до B4A (Easergy MiCOM P24x), до E3F (Easergy MiCOM P341), до B3F (Easergy MiCOM P342), до B3F (Easergy MiCOM P343), до B3F (Easergy MiCOM P344), до B3F (Easergy MiCOM P345), до E3A (Easergy MiCOM P442), до E3A (Easergy MiCOM P444), до H6A (Easergy MiCOM P443), до H6A (Easergy MiCOM P445), до H6A (Easergy MiCOM P543), до H6A (Easergy MiCOM P446), до H6A (Easergy MiCOM P545), до H6A (Easergy MiCOM P546), до G6A (Easergy MiCOM P841), до B3F (Easergy MiCOM P643), до B4A (Easergy MiCOM P642), до B4A (Easergy MiCOM P645), до B2A (Easergy MiCOM P741), до B2A (Easergy MiCOM P742), до B2A (Easergy MiCOM P743), до B4E (Easergy MiCOM P746), до C4E (Easergy MiCOM P747), до B4A (Easergy MiCOM P849), - (Easergy MiCOM Px40 Series)

Product types

Network device, Network appliance software

Mitigations

Использование рекомендаций: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-03.pdf

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "CVSS 4.0": "AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Schneider Electric",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e D3A (Easergy MiCOM P14x), \u0434\u043e B4A (Easergy MiCOM P24x), \u0434\u043e E3F (Easergy MiCOM P341), \u0434\u043e B3F (Easergy MiCOM P342), \u0434\u043e B3F (Easergy MiCOM P343), \u0434\u043e B3F (Easergy MiCOM P344), \u0434\u043e B3F (Easergy MiCOM P345), \u0434\u043e E3A (Easergy MiCOM P442), \u0434\u043e E3A (Easergy MiCOM P444), \u0434\u043e H6A (Easergy MiCOM P443), \u0434\u043e H6A (Easergy MiCOM P445), \u0434\u043e H6A (Easergy MiCOM P543), \u0434\u043e H6A (Easergy MiCOM P446), \u0434\u043e H6A (Easergy MiCOM P545), \u0434\u043e H6A (Easergy MiCOM P546), \u0434\u043e G6A (Easergy MiCOM P841), \u0434\u043e B3F (Easergy MiCOM P643), \u0434\u043e B4A (Easergy MiCOM P642), \u0434\u043e B4A (Easergy MiCOM P645), \u0434\u043e B2A (Easergy MiCOM P741), \u0434\u043e B2A (Easergy MiCOM P742), \u0434\u043e B2A (Easergy MiCOM P743), \u0434\u043e B4E (Easergy MiCOM P746), \u0434\u043e C4E (Easergy MiCOM P747), \u0434\u043e B4A (Easergy MiCOM P849), - (Easergy MiCOM Px40 Series)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "20.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "20.04.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-05570",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-4832",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Easergy MiCOM P14x, Easergy MiCOM P24x, Easergy MiCOM P341, Easergy MiCOM P342, Easergy MiCOM P343, Easergy MiCOM P344, Easergy MiCOM P345, Easergy MiCOM P442, Easergy MiCOM P444, Easergy MiCOM P443, Easergy MiCOM P445, Easergy MiCOM P543, Easergy MiCOM P446, Easergy MiCOM P545, Easergy MiCOM P546, Easergy MiCOM P841, Easergy MiCOM P643, Easergy MiCOM P642, Easergy MiCOM P645, Easergy MiCOM P741, Easergy MiCOM P742, Easergy MiCOM P743, Easergy MiCOM P746, Easergy MiCOM P747, Easergy MiCOM P849, Easergy MiCOM Px40 Series",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0440\u0435\u043b\u0435\u0439\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Schneider Electric Easergy, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0416\u0435\u0441\u0442\u043a\u043e\u0435 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-798)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0440\u0435\u043b\u0435\u0439\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Schneider Electric Easergy \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-798",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,9)"
}

CERTFR-2026-AVI-0433

Vulnerability from certfr_avis - Published: 2026-04-14 - Updated: 2026-04-14

De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Schneider Electric	EcoStruxure	EcoStruxure Control Expert versions antérieures à 16.2HF003
Schneider Electric	Connexium Managed Switches	Connexium Managed Switches toutes versions pour la vulnérabilité CVE-2024-3596
Schneider Electric	Easergy MiCOM	Easergy MiCOM P741, P742 et P743 versions antérieures à B2A pour la vulnérabilité CVE-2026-4832
Schneider Electric	Easergy MiCOM	Easergy MiCOM P746 versions antérieures à C4E
Schneider Electric	Modicon	Modicon Managed Switches toutes versions pour la vulnérabilité CVE-2024-3596
Schneider Electric	Easergy MiCOM	Easergy MiCOM P642, P645 versions antérieures à B4A
Schneider Electric	Easergy MiCOM	Easergy MiCOM P342, P343, P344, P345 versions antérieures à B3F
Schneider Electric	Easergy MiCOM	Easergy MiCOM P841 versions antérieures à G6A
Schneider Electric	Easergy MiCOM	Easergy MiCOM P14x versions antérieures à B4A
Schneider Electric	Easergy MiCOM	Easergy MiCOM P442, P444 versions antérieures à E3A
Schneider Electric	Modicon	Modicon Redundancy Switches toutes versions pour la vulnérabilité CVE-2024-3596
Schneider Electric	Easergy MiCOM	Easergy MiCOM P341 versions antérieures à E3F
Schneider Electric	Easergy MiCOM	Easergy MiCOM P643 versions antérieures à B3F
Schneider Electric	Easergy MiCOM	Easergy MiCOM P849 versions antérieures à B4A
Schneider Electric	Easergy MiCOM	Easergy MiCOM P24x versions antérieures à D3A
Schneider Electric	Easergy MiCOM	Easergy MiCOM P746 versions antérieures à B4E
Schneider Electric	Easergy MiCOM	Easergy MiCOM P443, P445, P446, P543, P544, P545 et P546 versions antérieures à H6A

References

Title

Publication Time

FKIE_CVE-2026-4832

Vulnerability from fkie_nvd - Published: 2026-04-14 16:16 - Updated: 2026-10-26 21:10

Severity

6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Summary

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

References

	URL	Tags
	cybersecurity@se.com	https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-03.pdf

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P14x",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P24x",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to D3A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P341",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to E3F"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P342, P343, P344, P345",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B3F"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P442, P444",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to E3A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P443, P445, P446, P543, P544, P545, P546",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to H6A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P642, P645",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P643",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B3F"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P741, P742, P743",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B2A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P746",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4E or C4E"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P841",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to G6A"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Easergy MiCOM P849",
          "vendor": "Schneider Electric",
          "versions": [
            {
              "status": "affected",
              "version": "All versions prior to B4A"
            }
          ]
        }
      ],
      "source": "cybersecurity@se.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad CWE-798 de Uso de credenciales codificadas de forma r\u00edgida que podr\u00eda causar acceso no autorizado a informaci\u00f3n sensible del dispositivo cuando un atacante no autenticado es capaz de interrogar el puerto SNMP."
    }
  ],
  "id": "CVE-2026-4832",
  "lastModified": "2026-10-26T21:10:00.170",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.9,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "cybersecurity@se.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-4832",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-14T18:15:51.123382Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-14T16:16:48.167",
  "references": [
    {
      "source": "cybersecurity@se.com",
      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf"
    }
  ],
  "sourceIdentifier": "cybersecurity@se.com",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ],
      "source": "cybersecurity@se.com",
      "type": "Secondary"
    }
  ]
}

GHSA-GF64-FPQ6-HC6F

Vulnerability from github – Published: 2026-04-14 18:30 – Updated: 2026-04-14 18:30

Details

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

Severity

6.9 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-4832"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-798"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-14T16:16:48Z",
    "severity": "MODERATE"
  },
  "details": "CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.",
  "id": "GHSA-gf64-fpq6-hc6f",
  "modified": "2026-04-14T18:30:36Z",
  "published": "2026-04-14T18:30:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4832"
    },
    {
      "type": "WEB",
      "url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2026-104-03.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

ICSA-26-190-03

Vulnerability from csaf_cisa - Published: 2026-04-14 07:00 - Updated: 2026-07-09 06:00

Summary

Schneider Electric Easergy MiCOM Px40 Series

Scope

1 vulnerability in this advisory, including CVE-2026-4832.

CVE-2026-4832

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Known affected: 13 products

Open the full advisory

SEVD-2026-104-03

Vulnerability from csaf_se - Published: 2026-04-14 07:00 - Updated: 2026-05-12 07:00

Summary

Use of Hard-coded Credentials vulnerability on Easergy MiCOM Px40 Series

Scope

1 vulnerability in this advisory, including CVE-2026-4832.

CVE-2026-4832

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Known affected: 13 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-4832 (GCVE-0-2026-4832)

BDU:2026-05570 (CVE-2026-4832)

CERTFR-2026-AVI-0433

Solutions

FKIE_CVE-2026-4832

GHSA-GF64-FPQ6-HC6F

ICSA-26-190-03

SEVD-2026-104-03

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour