NetSight
IP …
medium6.5

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Eth…

Impact

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

Affected products

VendorProductAffected versions
Schneider-ElectricMicom P141 Firmware
All versions
Schneider-ElectricMicom P142 Firmware
All versions
Schneider-ElectricMicom P143 Firmware
All versions
Schneider-ElectricMicom P145 Firmware
All versions
Schneider-ElectricMicom P642 Firmware
All versions
Schneider-ElectricMicom P643 Firmware
All versions
Schneider-ElectricMicom P645 Firmware
All versions
Schneider-ElectricMicom P849 Firmware
All versions
Schneider-ElectricMicom P746 Firmware
All versions
Schneider-ElectricMicom P841a Firmware
All versions
Schneider-ElectricMicom P841b Firmware
All versions
Schneider-ElectricMicom P443 Firmware
All versions

Weakness classification

CWE-613

References