What is the CVSS score of CVE-2020-7491?

CVE-2020-7491 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.3%.

Tricon Tcm 4351 Firmware CVE-2020-7491

Q: Which versions of Tricon Tcm 4351 Firmware are affected by CVE-2020-7491?

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access.

HIGH

2020-07-23 cybersecurity@se.com

Information Disclosure Tricon Tcm 4351 Firmware Tricon Tcm 4352 Firmware Tricon Tcm 4351A Firmware Tricon Tcm 4351B Firmware Tricon Tcm 4352A Firmware Tricon Tcm 4352B Firmware Tristation 1131 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jul 23, 2020 - 21:15 nvd

HIGH 7.5

DescriptionNVD

AnalysisAI

VERSION NOT SUPPORTED WHEN ASSIGNED A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

VERSION NOT SUPPORTED WHEN ASSIGNED A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4. Affected products include: Schneider-Electric Tricon Tcm 4351 Firmware, Schneider-Electric Tricon Tcm 4352 Firmware, Schneider-Electric Tricon Tcm 4351A Firmware, Schneider-Electric Tricon Tcm 4351B Firmware, Schneider-Electric Tricon Tcm 4352A Firmware. Version information: through 10.5.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.