CVE-2026-4827: falha de alta gravidade em Schneider Electric Easergy C5
Insufficient Entropy vulnerability on Multiple Products
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.3%
CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Schneider Electric · Easergy C5Schneider Electric · Easergy MiCOM C264Schneider Electric · Easergy MiCOM P30Schneider Electric · Easergy MiCOM P40Schneider Electric · EasyLogic T150 (formerly Saitel DR)Schneider Electric · EcoStruxure™ Power Automation System Gateway (EPAS-GTW)Schneider Electric · EcoStruxure™ Power Automation System User Interface (EPAS-UI)Schneider Electric · EcoStruxure™ Power OperationSchneider Electric · iPMFLSSchneider Electric · PowerLogic™ P5 Protection RelaySchneider Electric · PowerLogic™ P7 Protection and Control PlatformSchneider Electric · PowerLogic™ T300Schneider Electric · PowerLogic™ T500Schneider Electric · Saitel DP