Към съдържанието
Търсене

CVE-2026-4827: Schneider Electric Easergy MiCOM C264, слаба

8.7

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

Засегнати продукти

  • Schneider Electric Easergy MiCOM C264: Versions D6.x; Versions D7.33 and prior
  • Schneider Electric Easergy C5: Version 1.1.17 and prior
  • Schneider Electric Easergy MiCOM P30: P139 version prior to P139.678.700; P437 version prior to P437.678.700; P439 version prior to P439.678.700; P532 version prior to P532.678.700; P539 version prior to P539.678.700; P631 version prior to P631.678.700; P632 version prior to P632.678.700; P633 version prior to P633.678.700; P634 version prior to P634.678.700; P633 version P633.680.700 only; P634 version P634.680.700 only; P138 version prior to P138.677.700; P436 version prior to P436.677.701; P438 version prior to P438.677.701; P638 version prior to P638.677.700; C434 version prior to C434.679.700
  • Schneider Electric Easergy MiCOM P40: Series model numbers with Protocol Option bit as G, H or L and all firmware versions
  • Schneider Electric EcoStruxure™ Power Automation System Gateway (EPAS-GTW): Version 6.4.616.200.100 and prior
  • Schneider Electric EcoStruxure™ Power Automation System User Interface (EPAS-UI): Version 3.0.3 and prior
  • Schneider Electric EcoStruxure™ Power Operation: Version 2022 CU6 and prior; Version 2024 CU2 and prior
  • Schneider Electric iPMFLS: Version 64.2025.0.13 and prior
  • Schneider Electric PowerLogic™ P5 Protection Relay: V02.502.103 and prior
  • Schneider Electric PowerLogic™ P7 Protection and Control Platform: V02.002.002 and prior
  • Schneider Electric PowerLogic™ T300: Version 2.9.4 and prior
  • Schneider Electric PowerLogic™ T500: Version 11.08.02 and prior
  • Schneider Electric Saitel DP: Version 11.06.36 and prior
  • Schneider Electric EasyLogic T150 (formerly Saitel DR): Version 11.06.30 and prior

Вид слабост

История

  • 12 май 2026 Публикувано

Първоизточници

CVE-2026-4827: Schneider Electric Easergy MiCOM C264, слаба | freedomonline.bg