CVE-2021-30063

High

Description

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.

SeverityHigh
CVSS7.5
Exploit probability—
ProductBelden Tofino Xenon Security Appliance Firmware
PublishedApr 3, 2022
First seenApr 3, 2022

How to fix

Update
  • belden tofino_xenon_security_appliance_firmware03.2.03 or later
  • schneider-electric tcsefm0000_firmware03.23 or later

Affected products

ProductAffected versionsFixed in
belden tofino_xenon_security_appliance_firmwarev < 03.2.0303.2.03
belden tofino_argon_fa-tsa-220-tx\/mm_firmwareNo range specified—
belden tofino_argon_fa-tsa-220-tx\/tx_firmwareNo range specified—
belden tofino_argon_fa-tsa-220-mm\/tx_firmwareNo range specified—
belden tofino_argon_fa-tsa-220-mm\/mm_firmwareNo range specified—
belden tofino_argon_fa-tsa-100-tx\/tx_firmwareNo range specified—
belden eagle_20_tofino_943_987-505-mm\/mm_firmwareNo range specified—
belden eagle_20_tofino_943_987-504-mm\/tx_firmwareNo range specified—
belden eagle_20_tofino_943_987-502_-tx\/mm_firmwareNo range specified—
belden eagle_20_tofino_943_987-501-tx\/tx_firmwareNo range specified—
schneider-electric tcsefm0000_firmwarev < 03.2303.23

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-30063 · Belden Tofino Xenon Security Appliance Firmware · Dark Radar