This vulnerability (CVE-2026-4832) concerns the use of hard-coded credentials (CWE-798) in Schneider Electric Easergy MiCOM P14x devices before version B4A. An unauthenticated attacker can potentially interrogate the SNMP port to gain unauthorized access to sensitive device information. The CVSS 4.0 vector indicates the attack can be performed remotely over the network without authentication or user interaction, with low attack complexity and no privileges required. The vulnerability is publicly disclosed but lacks an official remediation or patch from Schneider Electric as of the publication date.

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from the affected devices. Since the attacker does not need authentication or privileges, the risk is elevated for exposure of device data. However, the impact is limited to information disclosure and does not include integrity or availability impacts according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider restricting network access to the SNMP port on affected devices to trusted management networks only. Monitoring for unusual SNMP queries may also help detect potential reconnaissance attempts. Avoid relying on default or hard-coded credentials in device configurations.