The vulnerability is a NULL Pointer Dereference (CWE‑476). When a malformed request is sent over the device’s exposed network interfaces, the system attempts to dereference a null pointer, which causes a denial‑of‑service condition that shuts down the HMI and configuration functionality. The impact is a loss of availability for the device’s management interface, potentially disrupting industrial automation operations.

Schneider Electric’s PowerLogic™ P7 products are affected. The CVE references a security notice for SEVD‑2026‑160‑03. No specific version range is listed in the CNA data, so all current or previous versions of the PowerLogic™ P7 platform are potentially vulnerable until a patch is applied.

The CVSS score of 8.7 indicates high severity, with a high likelihood of severe impact on availability. The EPSS score is not available, so the exploitation probability is unknown, but the absence of a KEV listing suggests no known large‑scale exploitation yet. The likely attack vector is network based; an attacker would need to send specially crafted requests to the exposed interfaces to trigger the null dereference.