Lucene search

[email protected]CVE-2021-22747

HistoryMay 26, 2021 - 8:15 p.m.

CVE-2021-22747

2021-05-2620:15:09

CWE-754

[email protected]

web.nvd.nist.gov

cve

2021

22747

triconex

cybersecurity

vulnerability

nvd

3.9 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.1 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22746.

Affected configurations

NVD

Node

schneider-electrictriconex_model_3009_mp_firmwareRange11.3.0–11.8.0

AND

schneider-electrictriconex_model_3009_mpMatch-

Node

schneider-electrictcm_4351b_firmwareRange11.3.0–11.5.1

schneider-electrictcm_4351b_firmwareMatch11.7.0

AND

schneider-electrictcm_4351bMatch-

CPENameOperatorVersion
schneider-electric:triconex_model_3009_mp_firmwareschneider-electric triconex model 3009 mp firmwarelt11.8.0

CPE	Name	Operator	Version
schneider-electric:triconex_model_3009_mp_firmware	schneider-electric triconex model 3009 mp firmware	lt	11.8.0

CNA Affected

[
  {
    "product": "Triconex Model 3009 MP installed on Tricon V11.3.x systems",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Triconex Model 3009 MP installed on Tricon V11.3.x systems"
      }
    ]
  }
]

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03

Social References

3.9 Low

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.1 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for CVE-2021-22747

cve4 cvelist5 nvd5 prion5