Vulnerability in Schneider-Electric Micom P141
CVE-2018-7758
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
EPSS: 0.006 (46.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Schneider-electric Micom_p141
- Schneider-electric Micom_p141_firmware
- Schneider-electric Micom_p142
- Schneider-electric Micom_p142_firmware
- Schneider-electric Micom_p143
- Schneider-electric Micom_p143_firmware
- Schneider-electric Micom_p145
- Schneider-electric Micom_p145_firmware
- Schneider-electric Micom_p441
- Schneider-electric Micom_p441_firmware
Weakness classification (CWE)
References
- cybersecurity@se.com (x_refsource_CONFIRM, Vendor Advisory)
- cybersecurity@se.com (x_refsource_CONFIRM, Vendor Advisory)
- cybersecurity@se.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-7758?
- CVE-2018-7758 is a medium-severity vulnerability in Schneider-Electric Micom P141, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2018-04-18.
- How severe is CVE-2018-7758?
- Medium severity. CVSS v3 base score is 6.5 out of 10.