CVE-2021-30064 CRITICAL

Published: 2022-04-03 | Last Modified: 2024-11-21 | Status: Modified

Description

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).

Additional Descriptions (1)

En Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 versiones hasta 03.23, TCSEFEA23F3F20/21 y Belden Tofino Xenon Security Appliance, un inicio de sesión SSH puede tener éxito con credenciales embebidas predeterminadas (si el dispositivo está en el estado no comisionado)

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector	NETWORK
Access Complexity	MEDIUM
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-798

Affected Products

Vendor	Product	Version	Update	Type
belden	tofino_xenon_security_appliance_firmware	*	<built-in method update of dict object at 0x7e60b9fb6bc0>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60b9fb7380>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60b9fb4800>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e60b9fb47c0>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60b9fb79c0>	Operating System
belden	tofino_argon_fa-tsa-100-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60b9fb6900>	Operating System
belden	eagle_20_tofino_943_987-505-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60b9fb6600>	Operating System
belden	eagle_20_tofino_943_987-504-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e60b9fb5340>	Operating System
belden	eagle_20_tofino_943_987-502_-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60b9fb5580>	Operating System
belden	eagle_20_tofino_943_987-501-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60b9fb5100>	Operating System
schneider-electric	tcsefea23f3f20_firmware	-	<built-in method update of dict object at 0x7e60b9fb4440>	Operating System
schneider-electric	tcsefea23f3f21_firmware	-	<built-in method update of dict object at 0x7e60b9fb7700>	Operating System
schneider-electric	tcsefea23f3f22_firmware	*	<built-in method update of dict object at 0x7e613c3516c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_xenon_security_appliance:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-100-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-100-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-505-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-505-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-504-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-504-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-502_-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-502_-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-501-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-501-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefea23f3f20_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefea23f3f20:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefea23f3f21_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefea23f3f21:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefea23f3f22_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefea23f3f22:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: [email protected]

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: [email protected]

Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory