Vulnerability in Schneider-electric Tricon_tcm_4351
CVE-2020-7491
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM…
EPSS: 0.013 (67.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Schneider-electric Tricon_tcm_4351
- Schneider-electric Tricon_tcm_4351a
- Schneider-electric Tricon_tcm_4351a_firmware
- Schneider-electric Tricon_tcm_4351b
- Schneider-electric Tricon_tcm_4351b_firmware
- Schneider-electric Tricon_tcm_4351_firmware
- Schneider-electric Tricon_tcm_4352
- Schneider-electric Tricon_tcm_4352a
- Schneider-electric Tricon_tcm_4352a_firmware
- Schneider-electric Tricon_tcm_4352b
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
- cybersecurity@se.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-7491?
- CVE-2020-7491 is a high-severity vulnerability in Schneider-electric Tricon_tcm_4351. CVSS score: 7.5/10. Published 2020-07-23.
- How severe is CVE-2020-7491?
- High severity. CVSS v3 base score is 7.5 out of 10.