What is CVE-2018-7758?

CVE-2018-7758 is a medium-severity vulnerability in Schneider-Electric Micom P141, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2018-04-18.

How severe is CVE-2018-7758?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Schneider-Electric Micom P141

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

Published 2018-04-18 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.006 (47.9th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 48th percentile — 47.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: -0.000

Affected products

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

www.schneider-electric.com/en/download/document/SEVD-2018-074-04/ (Vendor Advisory)
www.schneider-electric.com/en/download/document/SEVD-2018-074-03/ (Vendor Advisory)
www.schneider-electric.com/en/download/document/SEVD-2018-074-02/ (Vendor Advisory)

Frequently asked questions

What is CVE-2018-7758?: CVE-2018-7758 is a medium-severity vulnerability in Schneider-Electric Micom P141, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2018-04-18.
How severe is CVE-2018-7758?: Medium severity. CVSS v3 base score is 6.5 out of 10.