CVEvulnerability

CVE-2020-7491

7.5 HIGH Published 2020-07-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.

Affected configurations

• schneider-electric tricon tcm 4351 firmware (>= 10.2.0 < 10.5.4) • schneider-electric tricon tcm 4352 firmware (>= 10.2.0 < 10.5.4) • schneider-electric tricon tcm 4351a firmware (>= 10.2.0 < 10.5.4) • schneider-electric tricon tcm 4351b firmware (>= 10.2.0 < 10.5.4) • schneider-electric tricon tcm 4352a firmware (>= 10.2.0 < 10.5.4) • schneider-electric tricon tcm 4352b firmware (>= 10.2.0 < 10.5.4) • schneider-electric tristation 1131 firmware (>= 1.0.0 <= 4.9.0) • schneider-electric tristation 1131 firmware (>= 4.10.0 <= 4.12.0)

References