Skip to content
OpenAdvisories
Medium SEVD-2026-104-03 1 CVE

Use of Hard-coded Credentials vulnerability on Easergy MiCOM Px40 Series

Published Apr 14, 2026 · Updated May 12, 2026 · Revision 2

Vendor: Schneider Electric Product: Easergy MiCOM P14x Product: Easergy MiCOM P24x Product: Easergy MiCOM P341 Product: Easergy MiCOM P342, P343, P344, P345 Product: Easergy MiCOM P442, P444 Product: Easergy MiCOM P443, P445, P446, P543, P544, P545, P546 Product: Easergy MiCOM P642, P645 Product: Easergy MiCOM P643 Product: Easergy MiCOM P741, P742, P743 Product: Easergy MiCOM P746 Product: Easergy MiCOM P841 Product: Easergy MiCOM P849

Summary

Schneider Electric is aware of a vulnerability in its Easergy MiCOM Px40 Series products. The [Easergy MiCOM Px40](https://www.se.com/ww/en/product-subcategory/4725-easergy-micom-px40-series/?filter=business-6-medium-voltage-distribution-and-grid-automation) is a protection relay series for Medium Voltage, High Voltage and Extra High Voltage protection. Failure to apply the mitigations provided below may risk unauthorized exposure of basic device identification through the SNMP protocol.

Vulnerabilities 1

Revision history

  1. #2.0.0

    Updated the risk associated with successful exploitation of this vulnerability and revised the remediation table to a mitigation table to emphasize that multiple mitigation options are available.

  2. #1.0.0

    Original Release

References