1. Home
  2. CVE Database
  3. CVE-2018-7758
MEDIUM · 6.5

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated c...

Vulnerability Description

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricMicom P141 Firmware-
Schneider-ElectricMicom P141-
Schneider-ElectricMicom P142 Firmware-
Schneider-ElectricMicom P142-
Schneider-ElectricMicom P143 Firmware-
Schneider-ElectricMicom P143-
Schneider-ElectricMicom P145 Firmware-
Schneider-ElectricMicom P145-
Schneider-ElectricMicom P642 Firmware-
Schneider-ElectricMicom P642-
Schneider-ElectricMicom P643 Firmware-
Schneider-ElectricMicom P643-
Schneider-ElectricMicom P645 Firmware-
Schneider-ElectricMicom P645-
Schneider-ElectricMicom P849 Firmware-
Schneider-ElectricMicom P849-
Schneider-ElectricMicom P746 Firmware-
Schneider-ElectricMicom P746-
Schneider-ElectricMicom P841A Firmware-
Schneider-ElectricMicom P841A-

Related Weaknesses (CWE)

CWE-613

References

FAQ

What is CVE-2018-7758?

CVE-2018-7758 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated c...

How severe is CVE-2018-7758?

CVE-2018-7758 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-7758?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Micom P141 Firmware, Schneider-Electric Micom P141, Schneider-Electric Micom P142 Firmware, Schneider-Electric Micom P142, Schneider-Electric Micom P143 Firmware.