VULNERABILITY INTELLIGENCE

CVE-2018-7758

CVSS score6.5 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2018-04-18
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

Weakness classification

  • CWE-613: Insufficient Session Expiration

Primary references