7.5

CVE-2020-7491

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.

Data is provided by the National Vulnerability Database (NVD)
Schneider-electric ≫ Tricon Tcm 4351 Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352 Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4351a Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4351b Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352a Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352b Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tristation 1131 Firmware Version >= 1.0.0 <= 4.9.0
Schneider-electric ≫ Tristation 1131 Firmware Version >= 4.10.0 <= 4.12.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.25% 0.453
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
Third Party Advisory
US Government Resource