7.5

CVE-2020-7491

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Tricon Tcm 4351 Firmware Version >= 10.2.0 < 10.5.4
   Schneider-electric ≫ Tricon Tcm 4351 Version -
Schneider-electric ≫ Tricon Tcm 4352 Firmware Version >= 10.2.0 < 10.5.4
   Schneider-electric ≫ Tricon Tcm 4352 Version -
Schneider-electric ≫ Tricon Tcm 4351a Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4351b Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352a Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352b Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tristation 1131 Firmware Version >= 1.0.0 <= 4.9.0
   Schneider-electric ≫ Tristation 1131 Version -
Schneider-electric ≫ Tristation 1131 Firmware Version >= 4.10.0 <= 4.12.0
   Schneider-electric ≫ Tristation 1131 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.669
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
Third Party Advisory
US Government Resource
https://www.se.com/ww/en/download/document/SESB-2020-105-01/
Vendor Advisory