CVE-2021-30065 HIGH

Published: 2022-04-03 | Last Modified: 2024-11-21 | Status: Modified

Description

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.

Additional Descriptions (1)

En Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 versiones hasta 03.23, TCSEFEA23F3F20/21 y Belden Tofino Xenon Security Appliance, los paquetes ModBus diseñados pueden omitir el ModBus enforcer. NOTA: este problema se presenta debido a una corrección incompleta de CVE-2017-11401

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	HIGH
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	NONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source	Type	Description
[email protected]	Primary	en NVD-CWE-noinfo

Affected Products

Vendor	Product	Version	Update	Type
belden	tofino_xenon_security_appliance_firmware	*	<built-in method update of dict object at 0x7e60bae0c5c0>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60bae490c0>	Operating System
belden	tofino_argon_fa-tsa-220-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60bbcf2d80>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e60bbcf0c40>	Operating System
belden	tofino_argon_fa-tsa-220-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60bae0d880>	Operating System
belden	tofino_argon_fa-tsa-100-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e6112388bc0>	Operating System
belden	eagle_20_tofino_943_987-505-mm\/mm_firmware	-	<built-in method update of dict object at 0x7e60bbcf2280>	Operating System
belden	eagle_20_tofino_943_987-504-mm\/tx_firmware	-	<built-in method update of dict object at 0x7e60bb371d80>	Operating System
belden	eagle_20_tofino_943_987-502_-tx\/mm_firmware	-	<built-in method update of dict object at 0x7e60bbcf1d00>	Operating System
belden	eagle_20_tofino_943_987-501-tx\/tx_firmware	-	<built-in method update of dict object at 0x7e60bae0d080>	Operating System
schneider-electric	tcsefea23f3f20_firmware	-	<built-in method update of dict object at 0x7e60bbcf1a80>	Operating System
schneider-electric	tcsefea23f3f21_firmware	-	<built-in method update of dict object at 0x7e60ba793a40>	Operating System
schneider-electric	tcsefea23f3f22_firmware	*	<built-in method update of dict object at 0x7e60bbcf2940>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_xenon_security_appliance:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:tofino_argon_fa-tsa-100-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:tofino_argon_fa-tsa-100-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-505-mm\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-505-mm\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-504-mm\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-504-mm\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-502_-tx\/mm_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-502_-tx\/mm:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:belden:eagle_20_tofino_943_987-501-tx\/tx_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:belden:eagle_20_tofino_943_987-501-tx\/tx:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefea23f3f20_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefea23f3f20:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefea23f3f21_firmware:-:::::::*`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefea23f3f21:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:tcsefea23f3f22_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:tcsefea23f3f22:-:::::::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: [email protected]

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: [email protected]

Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.belden.com/support/security-assurance
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory