Vulnerability in Schneider-Electric Tcm 4351b
CVE-2021-22746
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22747.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.002 (14.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 14th percentile — 14.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Schneider-Electric Tcm 4351b
- Schneider-Electric Tcm 4351b Firmware — versions 11.7.0
- Schneider-Electric Triconex Model 3009 Mp
- Schneider-Electric Triconex Model 3009 Mp Firmware
- Triconex Model 3009 Mp Installed On Tricon V11.3.x Systems — versions Triconex Model 3009 MP installed on Tricon V11.3.x systems
Weakness classification (CWE)
References
- download.schneider-electric.com/files (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-22746?
- CVE-2021-22746 is a low-severity vulnerability in Schneider-Electric Tcm 4351b, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 3.9/10. Published 2021-05-26.
- How severe is CVE-2021-22746?
- Low severity. CVSS v3 base score is 3.9 out of 10.