Lucene search

[email protected]CVE-2021-22743

HistoryMay 26, 2021 - 8:15 p.m.

CVE-2021-22743

2021-05-2620:15:09

CWE-754

[email protected]

web.nvd.nist.gov

cve-2021-22743

triconex tcm 4351b

vulnerability

nvd

cybersecurity

industrial control systems

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

3.9 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.

Affected configurations

NVD

Node

schneider-electrictriconex_model_3009_mp_firmwareRange11.3.0–11.8.0

AND

schneider-electrictriconex_model_3009_mpMatch-

Node

schneider-electrictcm_4351b_firmwareRange11.3.0–11.5.1

schneider-electrictcm_4351b_firmwareMatch11.7.0

AND

schneider-electrictcm_4351bMatch-

CPENameOperatorVersion
schneider-electric:triconex_model_3009_mp_firmwareschneider-electric triconex model 3009 mp firmwarelt11.8.0

CPE	Name	Operator	Version
schneider-electric:triconex_model_3009_mp_firmware	schneider-electric triconex model 3009 mp firmware	lt	11.8.0

CNA Affected

[
  {
    "product": "Triconex TCM 4351B installed on Tricon V11.3.x systems.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Triconex TCM 4351B installed on Tricon V11.3.x systems"
      }
    ]
  }
]

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03

Social References

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

3.9 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

JSON

Related for CVE-2021-22743

prion1 nvd1 cvelist1