A reachable assertion flaw allows an attacker with valid credentials to send a specially crafted request to a network‑exposed service, causing the system to halt or become unresponsive. The primary consequence is a loss of availability for the affected device, potentially disrupting industrial control operations. The weakness is identified as CWE‑617, indicating that the software does not properly guard against an assertion being triggered under unexpected conditions.

Schneider Electric PowerLogic™ P7 devices are affected. No specific firmware or software version numbers are provided in the advisory, so all installations of the product should be considered at risk until a patch is released.

The CVSS score of 6.9 classifies the issue as medium severity. EPSS data is unavailable, so the precise likelihood of exploitation cannot be quantified; however, because the vulnerability requires authentication and a reachable assertion, a threat actor with legitimate credentials could trigger a denial‑of‑service. The vulnerability is not listed in CISA’s KEV catalog, suggesting that there is no confirmed exploitation at this time. Attackers would likely need to authenticate to the exposed service, then send the malicious request to cause the crash.