CVE-2020-7491

{"id": "CVE-2020-7491", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-07-23T21:15:12.113", "references": [{"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cybersecurity@se.com"}, {"url": "https://www.se.com/ww/en/download/document/SESB-2020-105-01/", "tags": ["Vendor Advisory"], "source": "cybersecurity@se.com"}, {"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.se.com/ww/en/download/document/SESB-2020-105-01/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4."}, {"lang": "es", "value": "**VERSION NO SOPORTADA CUANDO SE ASIGN\u00d3** Una cuenta de puerto de depuraci\u00f3n heredada en los TCM instalados en sistema Tricon versiones 10.2.0 hasta 10.5.3, es visible en la red y podr\u00eda permitir un acceso inapropiado. Esta vulnerabilidad es corregida en TCM versi\u00f3n 10.5.4"}], "lastModified": "2024-11-21T05:37:15.040", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3183741-92D5-4437-91F6-AF666232204B", "versionEndExcluding": "10.5.4", "versionStartIncluding": "10.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4351:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CA997CF-D574-4D1B-B71F-A0EBB31303DA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA3F011D-5096-4EF6-94B7-9D66DC29583F", "versionEndExcluding": "10.5.4", "versionStartIncluding": "10.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4352:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A965FF8-A474-447E-84AE-ED902B47A3A3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351a_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8F8AB23-9DA4-4430-9FB1-BCC7D8BB88A9", "versionEndExcluding": "10.5.4", "versionStartIncluding": "10.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4351a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D4D6502-A5D3-44A9-AF07-6717EADB98D0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351b_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F909483-5DEA-4565-96B7-58BC3F0554CE", "versionEndExcluding": "10.5.4", "versionStartIncluding": "10.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4351b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4A46632D-151C-43D3-BFA3-72C87304AB8B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352a_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AA8E6F5-7D88-403B-B3A2-FB28C5369DF2", "versionEndExcluding": "10.5.4", "versionStartIncluding": "10.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4352a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D4836B8C-1BEC-4076-928D-CBB403836BF2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352b_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B069292-3C0B-4CF8-8049-5E45A88FB4CB", "versionEndExcluding": "10.5.4", "versionStartIncluding": "10.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4352b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "89D4DE85-CC63-415C-9C07-8DE9C762AF3B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:schneider-electric:tristation_1131_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EED15135-BC97-44FD-A2FF-3AEFACB79543", "versionEndIncluding": "4.9.0", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:o:schneider-electric:tristation_1131_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "016138FC-307D-48D8-87F9-045A8A22498D", "versionEndIncluding": "4.12.0", "versionStartIncluding": "4.10.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:schneider-electric:tristation_1131:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "723A226B-0742-4FC7-BF67-C7FA575BC85A"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cybersecurity@se.com"}