CVE-2021-30064
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).
Affected (13)
Products: Belden: Tofino Xenon Security Appliance Firmware, Tofino Argon Fa Tsa 220 Tx/mm Firmware, Tofino Argon Fa Tsa 220 Tx/tx Firmware, Tofino Argon Fa Tsa 220 Mm/tx Firmware, Tofino Argon Fa Tsa 220 Mm/mm Firmware, Tofino Argon Fa Tsa 100 Tx/tx Firmware, Eagle 20 Tofino 943 987 505 Mm/mm Firmware, Eagle 20 Tofino 943 987 504 Mm/tx Firmware, Eagle 20 Tofino 943 987 502 Tx/mm Firmware, Eagle 20 Tofino 943 987 501 Tx/tx Firmware · Schneider Electric: Tcsefea23f3f20 Firmware, Tcsefea23f3f21 Firmware, Tcsefea23f3f22 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 03.2.03 |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Xenon Security Appliance | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Tx/mm | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Tx/tx | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Mm/tx | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 220 Mm/mm | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Tofino Argon Fa Tsa 100 Tx/tx | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 505 Mm/mm | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 504 Mm/tx | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 502 Tx/mm | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Belden Eagle 20 Tofino 943 987 501 Tx/tx | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Tcsefea23f3f20 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Tcsefea23f3f21 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 03.23 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Tcsefea23f3f22 | All versions |
References (4)
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.