Easergy Micom P14X CVE-2026-4832

The vulnerability stems from CWE-798 (Use of Hard-coded Credentials), a well-known weakness where authentication secrets are embedded in firmware or software rather than dynamically managed. Schneider Electric's Easergy MiCOM line are industrial protective relays-microprocessor-based devices used in electrical substations and power distribution networks to detect faults and trip circuit breakers. These devices expose SNMP (Simple Network Management Protocol) interfaces for remote monitoring and diagnostics. SNMP communities (akin to passwords) control access to Management Information Base (MIB) objects, but when credentials are hard-coded, any network-accessible device becomes readable to any attacker who can reach UDP port 161. The CVSS vector (AV:N/AC:L/PR:N) confirms network-based unauthenticated access with low attack complexity-the attacker only needs network connectivity and a standard SNMP client tool. The VC:L rating indicates confidentiality loss is limited (sensitive device data, not full system compromise), but in critical infrastructure contexts, even partial data disclosure can enable reconnaissance for follow-on attacks.