CVE-2021-30062 HIGH

Published: 2022-04-03 | Last Modified: 2024-11-21 | Status: Modified

Description

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.

Additional Descriptions (1)

En Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 versiones anteriores a 03.23 y Belden Tofino Xenon Security Appliance, los paquetes OPC diseñados pueden omitir el reforzador OPC

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	HIGH
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en NVD-CWE-noinfo

Affected Products

Vendor	Product	Version	Update	Type
belden	tofino_xenon_security_appliance_firmware	*	<built-in method update of dict object at 0x7e60e8c7df40>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e6071eafbc0>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e6110a55880>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e61114e38c0>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60e8c7da80>	Operating System
belden	tofino_argon_fa-tsa-100-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60e8c7d900>	Operating System
belden	eagle_20_tofino_943_987-505-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60a88aaec0>	Operating System
belden	eagle_20_tofino_943_987-504-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e60e83431c0>	Operating System
belden	eagle_20_tofino_943_987-502_-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60e83410c0>	Operating System
belden	eagle_20_tofino_943_987-501-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60e8c7c180>	Operating System
schneider-electric	tcsefm0000_firmware	*	<built-in method update of dict object at 0x7e61114e1080>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_xenon_security_appliance:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-100-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-100-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-505-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-505-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-504-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-504-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-502_-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-502_-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-501-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-501-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefm0000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefm0000:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: [email protected]

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: [email protected]

Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory