CVE-2018-7758 MEDIUM

Published: 2018-04-18 | Last Modified: 2026-06-17 | Status: Modified

Description

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

Additional Descriptions (1)

Existe una vulnerabilidad de denegación de servicio (DoS) en MiCOM Px4x (excepto el rango P540) con una placa Ethernet heredada, MiCOM P540D Range con una placa Ethernet heredada y MiCOM Px4x Rejuvenated, de Schneider Electric, que podrían perder la comunicación de red en caso de que TCP/IP abra peticiones en el puerto 20000 (DNP3oE) si una sesión TCP/IP más antigua siga abierta con una dirección IP y un número de puerto idénticos.

CVSS Metrics

Base Score: 3.3 (LOW)

AV:A/AC:L/Au:N/C:N/I:N/A:P

Access Vector	ADJACENT_NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 6.5

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-613

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	micom_p141_firmware	-	<built-in method update of dict object at 0x7e6071e54140>	Operating System
schneider-electric	micom_p142_firmware	-	<built-in method update of dict object at 0x7e6071e57440>	Operating System
schneider-electric	micom_p143_firmware	-	<built-in method update of dict object at 0x7e60ba791780>	Operating System
schneider-electric	micom_p145_firmware	-	<built-in method update of dict object at 0x7e6112303e40>	Operating System
schneider-electric	micom_p642_firmware	-	<built-in method update of dict object at 0x7e6071e55b40>	Operating System
schneider-electric	micom_p643_firmware	-	<built-in method update of dict object at 0x7e613c3a82c0>	Operating System
schneider-electric	micom_p645_firmware	-	<built-in method update of dict object at 0x7e613c3a8880>	Operating System
schneider-electric	micom_p849_firmware	-	<built-in method update of dict object at 0x7e6071e57540>	Operating System
schneider-electric	micom_p746_firmware	-	<built-in method update of dict object at 0x7e60a8a60740>	Operating System
schneider-electric	micom_p841a_firmware	-	<built-in method update of dict object at 0x7e6071e557c0>	Operating System
schneider-electric	micom_p841b_firmware	-	<built-in method update of dict object at 0x7e60ba2a7d40>	Operating System
schneider-electric	micom_p443_firmware	-	<built-in method update of dict object at 0x7e6071e568c0>	Operating System
schneider-electric	micom_p445_firmware	-	<built-in method update of dict object at 0x7e60ba793880>	Operating System
schneider-electric	micom_p446_firmware	-	<built-in method update of dict object at 0x7e613c3ab6c0>	Operating System
schneider-electric	micom_p441_firmware	-	<built-in method update of dict object at 0x7e60a8a60ec0>	Operating System
schneider-electric	micom_p442_firmware	-	<built-in method update of dict object at 0x7e6071e57dc0>	Operating System
schneider-electric	micom_p444_firmware	-	<built-in method update of dict object at 0x7e613c3a8f40>	Operating System
schneider-electric	micom_p541_firmware	-	<built-in method update of dict object at 0x7e613c3a9700>	Operating System
schneider-electric	micom_p542_firmware	-	<built-in method update of dict object at 0x7e613c3ab280>	Operating System
schneider-electric	micom_p543_firmware	-	<built-in method update of dict object at 0x7e610742dc80>	Operating System
schneider-electric	micom_p544_firmware	-	<built-in method update of dict object at 0x7e6071e54680>	Operating System
schneider-electric	micom_p545_firmware	-	<built-in method update of dict object at 0x7e6071e57ec0>	Operating System
schneider-electric	micom_p546_firmware	-	<built-in method update of dict object at 0x7e611206d600>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p141_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p141:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p142_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p142:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p143_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p143:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p145_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p145:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p642_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p642:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p643_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p643:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p645_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p645:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p849_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p849:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p746_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p746:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p841a_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p841a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p841b_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p841b:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p443_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p443:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p445_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p445:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p446_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p446:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p441_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p441:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p442_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p442:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p444_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p444:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p541_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p541:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p542_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p542:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p543_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p543:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p544_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p544:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p545_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p545:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:micom_p546_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:micom_p546:-:::::::*`

References

https://www.schneider-electric.com/en/download/document/SEVD-2018-074-02/
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-074-03/
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-074-04/
Source: [email protected]

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-074-02/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-074-03/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-074-04/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory