8.7
High
CVE-2026-4827 CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the…
Description
CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Easergy MiCOM C264 | Versions not published | |
| Easergy C5 | Versions not published | |
| Easergy MiCOM P30 | Versions not published | |
| Easergy MiCOM P40 | Versions not published | |
| EcoStruxure™ Power Automation System Gateway (EPAS-GTW) | Versions not published | |
| EcoStruxure Power Automation System User Interface (EPAS-UI) | Versions not published | |
| EcoStruxure™ Power Operation | Versions not published | |
| iPMFLS | Versions not published | |
| PowerLogic™ P5 Protection Relay | Versions not published |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerLogic™ P7 Protection and Control Platform | Versions not published | |
| PowerLogic™ T300 | Versions not published | |
| PowerLogic™ T500 | Versions not published | |
| Saitel DP | Versions not published | |
| EasyLogic T150 (formerly Saitel DR) | Versions not published | |
| EcoStruxure™ Power Automation System User Interface (EPAS-UI) | Versions not published |