Resource exhaustion in Schneider-electric Tricon_tcm_4351
CVE-2020-7486
**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2…
Vulnerability class: DoS (Denial of Service)
EPSS: 0.016 (73.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Schneider-electric Tricon_tcm_4351
- Schneider-electric Tricon_tcm_4351a
- Schneider-electric Tricon_tcm_4351a_firmware — versions 10.3.x, 10.4.x
- Schneider-electric Tricon_tcm_4351b
- Schneider-electric Tricon_tcm_4351b_firmware — versions 10.3.x, 10.4.x
- Schneider-electric Tricon_tcm_4351_firmware — versions 10.3.x, 10.4.x
- Schneider-electric Tricon_tcm_4352
- Schneider-electric Tricon_tcm_4352a
- Schneider-electric Tricon_tcm_4352a_firmware — versions 10.3.x, 10.4.x
- Schneider-electric Tricon_tcm_4352b
Weakness classification (CWE)
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
- cybersecurity@se.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-7486?
- CVE-2020-7486 is a high-severity vulnerability in Schneider-electric Tricon_tcm_4351, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2020-04-16.
- How severe is CVE-2020-7486?
- High severity. CVSS v3 base score is 7.5 out of 10.