A hard‑coded credential flaw allows an attacker who can query the SNMP interface to impersonate an authorized user and read or modify sensitive configuration and status data. The flaw is a classic case of hard‑coded passwords (CWE‑798) and enables non‑authenticated access to device information.

Schneider Electric Easergy MiCOM series, including models P14x, P24x, P341‑P345, P442‑P446, P543‑P546, P642, P643, P645, P741‑P743, P746, P841, and P849. Versions are not enumerated in the advisory, so all firmware builds shipped with hard‑coded SNMP credentials are potentially affected.

The CVSS base score of 6.9 indicates moderate to high severity. No exploit probability score (EPSS) is available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote access to the SNMP port; a remote attacker can connect from any network that can reach the device and without prior authentication exploit the hard‑coded credentials to read device data.