CVE-2021-22747

low-risk
Published 2021-05-26

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22746.

Do I need to act?

-
0.06% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.9/10 Low
PHYSICAL / LOW complexity

Affected Products (3)

Triconex Model 3009 Mp Firmware
Tcm 4351B Firmware
Tcm 4351B Firmware

Affected Vendors

Schneider-Electric

References (2)

Vendor Advisory https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03
Vendor Advisory https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03
23
/ 100
low-risk
Severity 14/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 9/34 · Low