CVE-2021-30063 HIGH

Published: 2022-04-03 | Last Modified: 2024-11-21 | Status: Modified

Description

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.

Additional Descriptions (1)

En Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 versiones hasta 03.23 y Belden Tofino Xenon Security Appliance, los paquetes OPC diseñados pueden provocar una denegación de servicio del ejecutor OPC

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en NVD-CWE-noinfo

Affected Products

Vendor	Product	Version	Update	Type
belden	tofino_xenon_security_appliance_firmware	*	<built-in method update of dict object at 0x7e6071eae6c0>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60eb2e0880>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e6071eafc40>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e60a88a9140>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60bae4aa40>	Operating System
belden	tofino_argon_fa-tsa-100-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60bae48c40>	Operating System
belden	eagle_20_tofino_943_987-505-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60eb2e0b40>	Operating System
belden	eagle_20_tofino_943_987-504-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e6071eac480>	Operating System
belden	eagle_20_tofino_943_987-502_-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60ba9bd680>	Operating System
belden	eagle_20_tofino_943_987-501-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60bae48400>	Operating System
schneider-electric	tcsefm0000_firmware	*	<built-in method update of dict object at 0x7e60ba9bd500>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_xenon_security_appliance:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-100-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-100-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-505-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-505-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-504-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-504-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-502_-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-502_-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-501-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-501-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefm0000_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefm0000:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: [email protected]

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: [email protected]

Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory