Vulnerability in Schneider-Electric Tcm 4351b
CVE-2021-22743
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.
EPSS: 0.002 (13.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Schneider-electric Tcm_4351b
- Schneider-electric Tcm_4351b_firmware — versions 11.7.0
- Schneider-electric Triconex_model_3009_mp
- Schneider-electric Triconex_model_3009_mp_firmware
- N/a Triconex Tcm 4351b Installed On Tricon V11.3.x Systems. — versions Triconex TCM 4351B installed on Tricon V11.3.x systems
Weakness classification (CWE)
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-22743?
- CVE-2021-22743 is a low-severity vulnerability in Schneider-Electric Tcm 4351b, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 3.9/10. Published 2021-05-26.
- How severe is CVE-2021-22743?
- Low severity. CVSS v3 base score is 3.9 out of 10.