Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-4827

Insufficient Entropy vulnerability on Multiple Products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric Easergy MiCOM C264

Default version status: unaffected

  • Versions D6.xaffected
  • Versions D7.33 and prioraffected

Schneider Electric Easergy C5

Default version status: unaffected

  • Version 1.1.17 and prioraffected

Schneider Electric Easergy MiCOM P30

Default version status: unaffected

  • P139 version prior to P139.678.700affected
  • P437 version prior to P437.678.700affected
  • P439 version prior to P439.678.700affected
  • P532 version prior to P532.678.700affected
  • P539 version prior to P539.678.700affected
  • P631 version prior to P631.678.700affected
  • P632 version prior to P632.678.700affected
  • P633 version prior to P633.678.700affected
  • P634 version prior to P634.678.700affected
  • P633 version P633.680.700 onlyaffected
  • P634 version P634.680.700 onlyaffected
  • P138 version prior to P138.677.700affected
  • P436 version prior to P436.677.701affected
  • P438 version prior to P438.677.701affected
  • P638 version prior to P638.677.700affected
  • C434 version prior to C434.679.700affected

Schneider Electric Easergy MiCOM P40

Default version status: unaffected

  • Series model numbers with Protocol Option bit as G, H or L and all firmware versionsaffected

Schneider Electric EcoStruxure™ Power Automation System Gateway (EPAS-GTW)

Default version status: unaffected

  • Version 6.4.616.200.100 and prioraffected

Schneider Electric EcoStruxure™ Power Automation System User Interface (EPAS-UI)

Default version status: unaffected

  • Version 3.0.3 and prioraffected

Schneider Electric EcoStruxure™ Power Operation

Default version status: unaffected

  • Version 2022 CU6 and prioraffected
  • Version 2024 CU2 and prioraffected

Schneider Electric iPMFLS

Default version status: unaffected

  • Version 64.2025.0.13 and prioraffected

Schneider Electric PowerLogic™ P5 Protection Relay

Default version status: unaffected

  • V02.502.103 and prioraffected

Schneider Electric PowerLogic™ P7 Protection and Control Platform

Default version status: unaffected

  • V02.002.002 and prioraffected

Schneider Electric PowerLogic™ T300

Default version status: unaffected

  • Version 2.9.4 and prioraffected

Schneider Electric PowerLogic™ T500

Default version status: unaffected

  • Version 11.08.02 and prioraffected

Schneider Electric Saitel DP

Default version status: unaffected

  • Version 11.06.36 and prioraffected

Schneider Electric EasyLogic T150 (formerly Saitel DR)

Default version status: unaffected

  • Version 11.06.30 and prioraffected

References