Lucene search

SchneiderCVE-2018-7758

HistoryApr 18, 2018 - 8:29 p.m.

CVE-2018-7758

2018-04-1820:29:00

CWE-613

schneider

web.nvd.nist.gov

schneider electric

micom

px4x

p540d range

dos

vulnerability

nvd

tcp/ip

port 20000

dnp3oe

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

47.0%

JSON

A denial of service vulnerability exists in Schneider Electric’s MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

Affected configurations

Nvd

Node

schneider-electricmicom_p141_firmwareMatch-

AND

schneider-electricmicom_p141Match-

Node

schneider-electricmicom_p142_firmwareMatch-

AND

schneider-electricmicom_p142Match-

Node

schneider-electricmicom_p143_firmwareMatch-

AND

schneider-electricmicom_p143Match-

Node

schneider-electricmicom_p145_firmwareMatch-

AND

schneider-electricmicom_p145Match-

Node

schneider-electricmicom_p642_firmwareMatch-

AND

schneider-electricmicom_p642Match-

Node

schneider-electricmicom_p643_firmwareMatch-

AND

schneider-electricmicom_p643Match-

Node

schneider-electricmicom_p645_firmwareMatch-

AND

schneider-electricmicom_p645Match-

Node

schneider-electricmicom_p849_firmwareMatch-

AND

schneider-electricmicom_p849Match-

Node

schneider-electricmicom_p746_firmwareMatch-

AND

schneider-electricmicom_p746Match-

Node

schneider-electricmicom_p841a_firmwareMatch-

AND

schneider-electricmicom_p841aMatch-

Node

schneider-electricmicom_p841bMatch-

AND

schneider-electricmicom_p841b_firmwareMatch-

Node

schneider-electricmicom_p443_firmwareMatch-

AND

schneider-electricmicom_p443Match-

Node

schneider-electricmicom_p445_firmwareMatch-

AND

schneider-electricmicom_p445Match-

Node

schneider-electricmicom_p446_firmwareMatch-

AND

schneider-electricmicom_p446Match-

Node

schneider-electricmicom_p441_firmwareMatch-

AND

schneider-electricmicom_p441Match-

Node

schneider-electricmicom_p442_firmwareMatch-

AND

schneider-electricmicom_p442Match-

Node

schneider-electricmicom_p444Match-

AND

schneider-electricmicom_p444_firmwareMatch-

Node

schneider-electricmicom_p541Match-

AND

schneider-electricmicom_p541_firmwareMatch-

Node

schneider-electricmicom_p542Match-

AND

schneider-electricmicom_p542_firmwareMatch-

Node

schneider-electricmicom_p543Match-

AND

schneider-electricmicom_p543_firmwareMatch-

Node

schneider-electricmicom_p544Match-

AND

schneider-electricmicom_p544_firmwareMatch-

Node

schneider-electricmicom_p545Match-

AND

schneider-electricmicom_p545_firmwareMatch-

Node

schneider-electricmicom_p546Match-

AND

schneider-electricmicom_p546_firmwareMatch-

VendorProductVersionCPE
schneider-electricmicom_p141_firmware-cpe:2.3:o:schneider-electric:micom_p141_firmware:-:*:*:*:*:*:*:*
schneider-electricmicom_p141-cpe:2.3:h:schneider-electric:micom_p141:-:*:*:*:*:*:*:*
schneider-electricmicom_p142_firmware-cpe:2.3:o:schneider-electric:micom_p142_firmware:-:*:*:*:*:*:*:*
schneider-electricmicom_p142-cpe:2.3:h:schneider-electric:micom_p142:-:*:*:*:*:*:*:*
schneider-electricmicom_p143_firmware-cpe:2.3:o:schneider-electric:micom_p143_firmware:-:*:*:*:*:*:*:*
schneider-electricmicom_p143-cpe:2.3:h:schneider-electric:micom_p143:-:*:*:*:*:*:*:*
schneider-electricmicom_p145_firmware-cpe:2.3:o:schneider-electric:micom_p145_firmware:-:*:*:*:*:*:*:*
schneider-electricmicom_p145-cpe:2.3:h:schneider-electric:micom_p145:-:*:*:*:*:*:*:*
schneider-electricmicom_p642_firmware-cpe:2.3:o:schneider-electric:micom_p642_firmware:-:*:*:*:*:*:*:*
schneider-electricmicom_p642-cpe:2.3:h:schneider-electric:micom_p642:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
schneider-electric	micom_p141_firmware	-	cpe:2.3:o:schneider-electric:micom_p141_firmware:-:::::::*
schneider-electric	micom_p141	-	cpe:2.3:h:schneider-electric:micom_p141:-:::::::*
schneider-electric	micom_p142_firmware	-	cpe:2.3:o:schneider-electric:micom_p142_firmware:-:::::::*
schneider-electric	micom_p142	-	cpe:2.3:h:schneider-electric:micom_p142:-:::::::*
schneider-electric	micom_p143_firmware	-	cpe:2.3:o:schneider-electric:micom_p143_firmware:-:::::::*
schneider-electric	micom_p143	-	cpe:2.3:h:schneider-electric:micom_p143:-:::::::*
schneider-electric	micom_p145_firmware	-	cpe:2.3:o:schneider-electric:micom_p145_firmware:-:::::::*
schneider-electric	micom_p145	-	cpe:2.3:h:schneider-electric:micom_p145:-:::::::*
schneider-electric	micom_p642_firmware	-	cpe:2.3:o:schneider-electric:micom_p642_firmware:-:::::::*
schneider-electric	micom_p642	-	cpe:2.3:h:schneider-electric:micom_p642:-:::::::*

Rows per page:

1-10 of 461

CNA Affected

[
  {
    "product": "MiCOM P540D Range with Legacy Ethernet Board",
    "vendor": "Schneider Electric SE",
    "versions": [
      {
        "status": "affected",
        "version": "MiCOM P540D Range with Legacy Ethernet Board, MiCOM Px4x with Legacy Ethernet Board, MiCOM Px4x Rejuvenated"
      }
    ]
  }
]

References

www.schneider-electric.com/en/download/document/SEVD-2018-074-02/

www.schneider-electric.com/en/download/document/SEVD-2018-074-03/

www.schneider-electric.com/en/download/document/SEVD-2018-074-04/

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

47.0%

JSON

Related for CVE-2018-7758