7.5

CVE-2020-7491

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Tricon Tcm 4351 Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352 Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4351a Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4351b Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352a Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tricon Tcm 4352b Firmware Version >= 10.2.0 < 10.5.4
Schneider-electric ≫ Tristation 1131 Firmware Version >= 1.0.0 <= 4.9.0
Schneider-electric ≫ Tristation 1131 Firmware Version >= 4.10.0 <= 4.12.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.453
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
Third Party Advisory
US Government Resource