CVE-2026-4832: Schneider Electric Easergy Micom p14x

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

Affected products

• Schneider Electric Easergy Micom p14x: before B4A (fixed in B4A)
• Schneider Electric Easergy Micom p24x: before D3A (fixed in D3A)
• Schneider Electric Easergy Micom p341: before E3F (fixed in E3F)
• Schneider Electric Easergy Micom p342, p343, p344, p345: before B3F (fixed in B3F)
• Schneider Electric Easergy Micom p442, p444: before E3A (fixed in E3A)
• Schneider Electric Easergy Micom p443, p445, p446, p543, p544, p545, p546: before H6A (fixed in H6A)
• Schneider Electric Easergy Micom p642, p645: before B4A (fixed in B4A)
• Schneider Electric Easergy Micom p643: before B3F (fixed in B3F)
• Schneider Electric Easergy Micom p741, p742, p743: before B2A (fixed in B2A)
• Schneider Electric Easergy Micom p746
• Schneider Electric Easergy Micom p841: before G6A (fixed in G6A)
• Schneider Electric Easergy Micom p849: before B4A (fixed in B4A)

Published 2026-04-14. Last modified 2026-06-17.