Which versions of PowerLogic P7 are affected by CVE-2026-9716?

Schneider Electric PowerLogic P7 power metering devices are vulnerable to remote denial-of-service attacks that disable the management interface and configuration functionality, leaving organizations…

How to fix or mitigate CVE-2026-9716?

24 hours: Inventory all Schneider Electric PowerLogic P7 devices; assess network exposure and connectivity; implement firewall rules restricting remote access to these devices from designated management systems only. 7 days: Deploy network-based monitoring and alerting on PowerLogic P7 device access; document all remote management access paths; conduct business continuity impact assessment for potential device unavailability. 30 days: Monitor Schneider Electric security advisories for patch availability; develop remediation strategy including validated patch deployment procedures or network relocation of critical devices to air-gapped management networks if operationally feasible.

PowerLogic P7 CVE-2026-9716

Q: What is the CVSS score of CVE-2026-9716?

CVE-2026-9716 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-39433 HIGH

NULL Pointer Dereference (CWE-476)

2026-06-25 schneider

GHSA-r5gq-r69x-5f8p

Denial Of Service Null Pointer Dereference Schneider Electric Powerlogic P7

8.7

CVSS 4.0 · Vendor: schneider

Severity by source

Vendor (schneider) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Remote, low-complexity, unauthenticated malformed requests crash the HMI service with availability-only impact, so PR:N/AC:L/A:H and C:N/I:N.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (schneider).

CVSS VectorVendor: schneider

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 25, 2026 - 16:20 vuln.today

DescriptionCVE.org

CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial-of-service condition, rendering the device’s HMI and configuration functionality unavailable when malformed requests are received over exposed network interfaces.

AnalysisAI

Denial-of-service in Schneider Electric PowerLogic P7 power metering devices allows remote, unauthenticated attackers to crash the device's HMI and configuration functionality by sending malformed requests to exposed network interfaces. The flaw stems from a NULL pointer dereference (CWE-476) that renders local management and configuration unavailable until recovery. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; the CVSS 4.0 base score of 8.7 reflects a high availability impact with no confidentiality or integrity exposure.

Technical ContextAI

The PowerLogic P7 is a Schneider Electric power-monitoring/metering and protection relay device (cpe:2.3:a:schneider_electric:powerlogic™_p7) commonly deployed in industrial and critical-infrastructure electrical distribution environments, where it exposes a web/HMI and configuration service over the network. The root cause is CWE-476 (NULL Pointer Dereference): the device's request-handling logic dereferences a pointer that was never initialized or was set to NULL when processing specially malformed input, causing the affected process or firmware service to fault. Because the affected component is the embedded HMI/configuration interface rather than the metering measurement core, exploitation degrades device manageability and monitoring rather than corrupting data, consistent with the VC:N/VI:N/VA:H impact profile.

RemediationAI

Patch status: Patch available per vendor advisory - apply the fixed firmware identified in Schneider Electric notice SEVD-2026-160-03 (https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-03.pdf); the exact patched version is not stated in the provided data, so confirm it against that advisory. Where immediate patching is not possible, reduce exposure of the management/HMI interface: place the PowerLogic P7 on an isolated OT/management VLAN and block its web/configuration ports from untrusted networks at the firewall (trade-off: remote management must then go through a jump host or VPN), restrict access to the HMI/configuration endpoint to a small allowlist of trusted engineering workstations (trade-off: complicates ad-hoc maintenance), and disable or firewall any internet-facing access entirely. Because the impact is a DoS rather than code execution or data exposure, monitoring for repeated device reboots or HMI unavailability is a reasonable detective control while the patch is staged.