CVE-2018-7758
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded)...
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
- Record
CVE-2018-7758- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 3.3 Low
AV:A/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-613
- Updated
- 2026-11-02
CVE List No score
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
- Record
CVE-2018-7758- Updated
- 2026-11-02
EUVDEUVD-2018-19470 No score
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
- Record
EUVD-2018-19470- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w8w3-m5jx-qwwr
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded)...
A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.
- Record
GHSA-w8w3-m5jx-qwwr- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-613
- Updated
- 2026-11-02
Affected products
- schneider electric se micom p540d range with legacy ethernet board
- schneider-electric micom p141 firmware
- schneider-electric micom p142 firmware
- schneider-electric micom p143 firmware
- schneider-electric micom p145 firmware
- schneider-electric micom p441 firmware
- schneider-electric micom p442 firmware
- schneider-electric micom p443 firmware
- schneider-electric micom p444 firmware
- schneider-electric micom p445 firmware
- schneider-electric micom p446 firmware
- schneider-electric micom p541 firmware
Show 12 moreShow less
- schneider-electric micom p542 firmware
- schneider-electric micom p543 firmware
- schneider-electric micom p544 firmware
- schneider-electric micom p545 firmware
- schneider-electric micom p546 firmware
- schneider-electric micom p642 firmware
- schneider-electric micom p643 firmware
- schneider-electric micom p645 firmware
- schneider-electric micom p746 firmware
- schneider-electric micom p841a firmware
- schneider-electric micom p841b firmware
- schneider-electric micom p849 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-7758 is a medium vulnerability (CVSS 6.5) in Schneider Electric Se Micom P540d Range With Legacy Ethernet Board, published April 18, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 50th percentile. No source names a fixed version.