Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22743


Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.


Published

2021-05-26T20:15:09.323

Last Modified

2024-11-21T05:50:34.680

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.9 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-754

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric triconex_model_3009_mp_firmware < 11.8.0 Yes
Hardware schneider-electric triconex_model_3009_mp - No
Operating System schneider-electric tcm_4351b_firmware < 11.5.1 Yes
Operating System schneider-electric tcm_4351b_firmware 11.7.0 Yes
Hardware schneider-electric tcm_4351b - No

References