Vulnerability in Schneider-Electric Tcm 4351b
CVE-2021-22742
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.
EPSS: 0.002 (15.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Schneider-electric Tcm_4351b
- Schneider-electric Tcm_4351b_firmware — versions 11.7.0
- Schneider-electric Triconex_model_3009_mp
- Schneider-electric Triconex_model_3009_mp_firmware
- N/a Triconex Model 3009 Mp Installed On Tricon V11.3.x Systems — versions Triconex Model 3009 MP installed on Tricon V11.3.x systems
Weakness classification (CWE)
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-22742?
- CVE-2021-22742 is a low-severity vulnerability in Schneider-Electric Tcm 4351b, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 3.9/10. Published 2021-05-26.
- How severe is CVE-2021-22742?
- Low severity. CVSS v3 base score is 3.9 out of 10.