CVE-2026-4832

State: Published
Severity: 6.9 Medium
Published: Apr 14, 2026
Updated: Apr 14, 2026
Reserved: Mar 25, 2026

Description

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N	schneider

Weaknesses

CWE-798 Use of Hard-Coded Credentials

Affected Products

Product	Versions
Easergy MiCOM P14xSchneider Electric	All versions prior to B4AAffected
Easergy MiCOM P24xSchneider Electric	All versions prior to D3AAffected
Easergy MiCOM P341Schneider Electric	All versions prior to E3FAffected
Easergy MiCOM P342, P343, P344, P345Schneider Electric	All versions prior to B3FAffected
Easergy MiCOM P442, P444Schneider Electric	All versions prior to E3AAffected
Easergy MiCOM P443, P445, P446, P543, P544, P545, P546Schneider Electric	All versions prior to H6AAffected
Easergy MiCOM P642, P645Schneider Electric	All versions prior to B4AAffected
Easergy MiCOM P643Schneider Electric	All versions prior to B3FAffected
Easergy MiCOM P741, P742, P743Schneider Electric	All versions prior to B2AAffected
Easergy MiCOM P746Schneider Electric	All versions prior to B4E or C4EAffected
Easergy MiCOM P841Schneider Electric	All versions prior to G6AAffected
Easergy MiCOM P849Schneider Electric	All versions prior to B4AAffected

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-104-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-104-03.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.