Schneider Electric: CWE331 Insufficient Entropy Enables Session Hijacking
CVE-2026-4827 Published on May 12, 2026
Insufficient Entropy vulnerability on Multiple Products
CWE331 Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in sessionmanagement protections.
Weakness Type
Insufficient Entropy
The software uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
Affected Versions
Schneider Electric Easergy MiCOM C264:- Version Versions D6.x all versions is affected.
- Version Versions D7.33 and prior is affected.
- Version Version 1.1.17 and prior is affected.
- Version Easergy MiCOM P139 version prior to P139.678.700 is affected.
- Version Easergy MiCOM P437 version prior to P437.678.700 is affected.
- Version Easergy MiCOM P439 version prior to P439.678.700 is affected.
- Version Easergy MiCOM P532 version prior to P532.678.700 is affected.
- Version Easergy MiCOM P539 version prior to P539.678.700 is affected.
- Version Easergy MiCOM P631 version prior to P631.678.700 is affected.
- Version Easergy MiCOM P632 version prior to P632.678.700 is affected.
- Version Easergy MiCOM P633 version prior to P633.678.700 is affected.
- Version Easergy MiCOM P633 version P633.680.700 only is affected.
- Version Easergy MiCOM P634 version prior to P634.678.700 is affected.
- Version Easergy MiCOM P634 version P634.680.700 only is affected.
- Version Easergy MiCOM P138 version prior to P138.677.700 is affected.
- Version Easergy MiCOM P436 version prior to P436.677.701 is affected.
- Version Easergy MiCOM P438 version prior to P438.677.701 is affected.
- Version Easergy MiCOM P638 version prior to P638.677.700 is affected.
- Version Easergy MiCOM C434 version prior to C434.679.700 is affected.
- Version P_ 4_ _ _ _ _ G_ _ _ _ _ M is affected.
- Version P_ 4_ _ _ _ _ H_ _ _ _ _ M is affected.
- Version P_ 4_ _ _ _ _ L _ _ _ _ _ M is affected.
- Version P_ 4_ _ _ _ _ G_ _ _ _ _ L is affected.
- Version P_ 4_ _ _ _ _ H_ _ _ _ _ L is affected.
- Version P_ 4_ _ _ _ _ L _ _ _ _ _ L is affected.
- Version Version 6.4.616.200.100 and prior is affected.
- Version Version 3.0.3 and prior is affected.
- Version Version 2022 CU6 and prior is affected.
- Version Version 2024 CU2 and prior is affected.
- Version Version 64.2025.0.13 and prior is affected.
- Version V02.502.103 and prior is affected.
- Version V02.002.002 and prior is affected.
- Version Version 2.9.4 and prior is affected.
- Version Version 11.08.02 and prior is affected.
- Version Version 11.06.36 and prior is affected.
- Version Version 11.06.30 and prior is affected.