Medium severity · published Apr 14, 2026
CVE-2026-4832
CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to…
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Easergy MiCOM P14x · Schneider Electric
All versions prior to B4A · source: vendor
EM
Easergy MiCOM P24x · Schneider Electric
All versions prior to D3A · source: vendor
EM
Easergy MiCOM P341 · Schneider Electric
All versions prior to E3F · source: vendor
EM
Easergy MiCOM P342, P343, P344, P345 · Schneider Electric
All versions prior to B3F · source: vendor
EM
Easergy MiCOM P442, P444 · Schneider Electric
All versions prior to E3A · source: vendor
EM
Easergy MiCOM P443, P445, P446, P543, P544, P545, P546 · Schneider Electric
All versions prior to H6A · source: vendor
EM
Easergy MiCOM P642, P645 · Schneider Electric
All versions prior to B4A · source: vendor
EM
Easergy MiCOM P643 · Schneider Electric
All versions prior to B3F · source: vendor
EM
Easergy MiCOM P741, P742, P743 · Schneider Electric
All versions prior to B2A · source: vendor
EM
Easergy MiCOM P746 · Schneider Electric
All versions prior to B4E or C4E · source: vendor
EM
Easergy MiCOM P841 · Schneider Electric
All versions prior to G6A · source: vendor
EM
Easergy MiCOM P849 · Schneider Electric
All versions prior to B4A · source: vendor