Lucene search

K
cve[email protected]CVE-2021-22746
HistoryMay 26, 2021 - 8:15 p.m.

CVE-2021-22746

2021-05-2620:15:09
CWE-754
web.nvd.nist.gov
25
4
cve
2021
22746
vulnerability
triconex
model 3009 mp
tricon
tcm
tristation
packet
write-protect
keyswitch

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

3.9 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22747.

Affected configurations

NVD
Node
schneider-electrictriconex_model_3009_mp_firmwareRange11.3.011.8.0
AND
schneider-electrictriconex_model_3009_mpMatch-
Node
schneider-electrictcm_4351b_firmwareRange11.3.011.5.1
OR
schneider-electrictcm_4351b_firmwareMatch11.7.0
AND
schneider-electrictcm_4351bMatch-

CNA Affected

[
  {
    "product": "Triconex Model 3009 MP installed on Tricon V11.3.x systems",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Triconex Model 3009 MP installed on Tricon V11.3.x systems"
      }
    ]
  }
]

Social References

More

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

3.9 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.3%

Related for CVE-2021-22746