Description
CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Easergy MiCOM P14x | All versions prior to B4A | — |
| Schneider Electric | Easergy MiCOM P24x | All versions prior to D3A | — |
| Schneider Electric | Easergy MiCOM P341 | All versions prior to E3F | — |
| Schneider Electric | Easergy MiCOM P342, P343, P344, P345 | All versions prior to B3F | — |
| Schneider Electric | Easergy MiCOM P442, P444 | All versions prior to E3A | — |
| Schneider Electric | Easergy MiCOM P443, P445, P446, P543, P544, P545, P546 | All versions prior to H6A | — |
| Schneider Electric | Easergy MiCOM P642, P645 | All versions prior to B4A | — |
| Schneider Electric | Easergy MiCOM P643 | All versions prior to B3F | — |
| Schneider Electric | Easergy MiCOM P741, P742, P743 | All versions prior to B2A | — |
| Schneider Electric | Easergy MiCOM P746 | All versions prior to B4E or C4E | — |
| Schneider Electric | Easergy MiCOM P841 | All versions prior to G6A | — |
| Schneider Electric | Easergy MiCOM P849 | All versions prior to B4A | — |
Advisories 2
- ICSA-26-190-03 Schneider Electric Easergy MiCOM Px40 Series CISA ICS & IT advisories · Jul 9, 2026
- SEVD-2026-104-03 Use of Hard-coded Credentials vulnerability on Easergy MiCOM Px40 Series Schneider Electric CPCERT · May 12, 2026