CVE-2020-7486

moderate-risk

Published 2020-04-16

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior.

Do I need to act?

0.30% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (12)

Tricon Tcm 4351 Firmware

Tricon Tcm 4352 Firmware

Tricon Tcm 4351A Firmware

Tricon Tcm 4351B Firmware

Tricon Tcm 4352A Firmware

Tricon Tcm 4352B Firmware

Affected Vendors

Schneider-Electric

References (4)

Third Party Advisory https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01

Vendor Advisory https://www.se.com/ww/en/download/document/SESB-2020-105-01

Third Party Advisory https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01

Vendor Advisory https://www.se.com/ww/en/download/document/SESB-2020-105-01

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 17/34 · Moderate