What is the CVSS score of CVE-2021-22743?

CVE-2021-22743 has a CVSS 3.1 base score of 3.9 (Low). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Triconex Model 3009 Mp Firmware CVE-2021-22743

LOW

Improper Check for Unusual or Exceptional Conditions (CWE-754)

2021-05-26 cybersecurity@se.com

Information Disclosure Triconex Model 3009 Mp Firmware Tcm 4351B Firmware

3.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.9 LOW

AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

May 26, 2021 - 20:15 nvd

LOW 3.9

DescriptionNVD

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.

AnalysisAI

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed. Rated low severity (CVSS 3.9), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-754. Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. Affected products include: Schneider-Electric Triconex Model 3009 Mp Firmware, Schneider-Electric Tcm 4351B Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.