CVE-2021-30062
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.
Affected (11)
Products: Belden: Tofino Xenon Security Appliance Firmware, Tofino Argon Fa Tsa 220 Tx/mm Firmware, Tofino Argon Fa Tsa 220 Tx/tx Firmware, Tofino Argon Fa Tsa 220 Mm/tx Firmware, Tofino Argon Fa Tsa 220 Mm/mm Firmware, Tofino Argon Fa Tsa 100 Tx/tx Firmware, Eagle 20 Tofino 943 987 505 Mm/mm Firmware, Eagle 20 Tofino 943 987 504 Mm/tx Firmware, Eagle 20 Tofino 943 987 502 Tx/mm Firmware, Eagle 20 Tofino 943 987 501 Tx/tx Firmware · Schneider Electric: Tcsefm0000 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 03.2.03 |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Xenon Security Appliance | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Tx/mm | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Tx/tx | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Mm/tx | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Mm/mm | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 100 Tx/tx | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 505 Mm/mm | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 504 Mm/tx | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 502 Tx/mm | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 501 Tx/tx | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 03.23 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Tcsefm0000 | All versions |
References (4)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.