Vulnerability in Schneider-Electric Tricon Tcm 4351
CVE-2020-7491
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.013 (69.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 69th percentile — 69.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Schneider-Electric Tricon Tcm 4351
- Schneider-Electric Tricon Tcm 4351a
- Schneider-Electric Tricon Tcm 4351a Firmware
- Schneider-Electric Tricon Tcm 4351b
- Schneider-Electric Tricon Tcm 4351b Firmware
- Schneider-Electric Tricon Tcm 4351 Firmware
- Schneider-Electric Tricon Tcm 4352
- Schneider-Electric Tricon Tcm 4352a
- Schneider-Electric Tricon Tcm 4352a Firmware
- Schneider-Electric Tricon Tcm 4352b
References
- www.se.com/ww/en/download/document/SESB-2020-105-01/ (Vendor Advisory)
- us-cert.cisa.gov/ics/advisories/icsa-20-205-01 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-7491?
- CVE-2020-7491 is a high-severity vulnerability in Schneider-Electric Tricon Tcm 4351. CVSS score: 7.5/10. Published 2020-07-23.
- How severe is CVE-2020-7491?
- High severity. CVSS v3 base score is 7.5 out of 10.