CVE-2021-22746
Low
Description
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22747.
SeverityLow
CVSS3.9
Exploit probability—
ProductSchneider-electric Triconex Model 3009 Mp Firmware
PublishedMay 26, 2021
First seenMay 26, 2021
Weakness typeCWE-754CWE-754
How to fix
Update
- schneider-electric triconex_model_3009_mp_firmware11.8.0 or later
- schneider-electric tcm_4351b_firmware11.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric triconex_model_3009_mp_firmware | 11.3.0 ≤ v < 11.8.0 | 11.8.0 |
| schneider-electric tcm_4351b_firmware | 11.3.0 ≤ v < 11.5.1, 11.7.0 | 11.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.