CVE-2021-22747

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique...

CVE-2021-22746

The vulnerability affects Triconex Model 3009 MP on Tricon V11.3.x. Root cause: an improper check for unusual or exceptional conditions in malformed TriStation packets when the write-protect keyswitch is in the program position. Impact: could cause a module reset on that condition. Connected Red ...

CVE-2021-22744

CVE-2021-22744 affects Triconex Model 3009 MP on Tricon V11.3.x; vulnerability arises from an improper check for unusual or exceptional conditions, potentially causing a module reset when the TCM receives malformed TriStation packets with the write-protect keyswitch in the program position. The R...

CVE-2021-22743

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position...

CVE-2021-22743

CVE-2021-22743 concerns the Triconex TCM 4351B on Tricon V11.3.x. The vulnerability arises from an improper check for unusual or exceptional conditions, which can cause a module reset when the TCM processes malformed TriStation packets with the write-protect keyswitch in the program position. The...

CVE-2021-22742

The CVE pertains to Triconex Model 3009 MP on Tricon V11.3.x systems, where an improper check for unusual or exceptional conditions allows a module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. The Red Hat entries confirm this C...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2021:1071 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

USN-4707-1: TCMU vulnerability

It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request...

Denial of Service Vulnerability in Schneider Tricon Safety Instrumented Systems TCM 4351B Communication Card (CNVD-2020-70795)

Tricon Safety Instrumented System is a safety instrumented system from Schneider Electric Co. The TCM 4351B communication card is a communication card for the Tricon Safety Instrumented System from Schneider, which supports Ethernet as well as serial communication. A denial of service vulnerabili...

Moderate: Red Hat Security Advisory: targetcli security and enhancement update

An update for targetcli is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Moderate: targetcli security and enhancement update

The targetcli package contains an administration shell for configuring Internet Small Computer System Interface iSCSI, Fibre Channel over Ethernet FCoE, and other SCSI targets, using the Target Core Mod/Linux-IO TCM/LIO kernel target subsystem. FCoE users also need to install and use the fcoe-uti...

Schneider Electric Tricon TCM Model Information Disclosure Vulnerability

Schneider Electric Tricon TCM Model 4351 and others are a communication module from Schneider Electric, France. An information disclosure vulnerability exists in the Schneider Electric Tricon TCM Model that stems from an older version of the program's debug port account being visible on the...

Design/Logic Flaw

VERSION NOT SUPPORTED WHEN ASSIGNED A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4...

CVE-2020-7491

CVE-2020-7491 is an improper access control flaw in Schneider Electric Triconex legacy equipment. A legacy debug port account in Tricon system TCMs (Models 4351/4352, 4351A/B, 4352A/B) installed in Tricon v10.0–10.5.3 is visible on the network, potentially allowing inappropriate access. This vuln...

[SECURITY] Fedora 32 Update: targetcli-2.1.53-1.fc32

An administration shell for configuring iSCSI, FCoE, and other SCSI targets, using the TCM/LIO kernel target subsystem. FCoE users will also need to install and use fcoe-utils...

Fedora: Security Advisory for targetcli (FEDORA-2020-83d2616f81)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : targetcli (RHSA-2020:1933)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1933 advisory. The targetcli package contains an administration shell for configuring Internet Small Computer System Interface iSCSI, Fibre Channel over Ethernet...

CVE-2020-7486

VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this...

Design/Logic Flaw

VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this...

CVE-2020-7486

VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this...