CVE-2021-30065
High
Description
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.
SeverityHigh
CVSS7.5
Exploit probability—
ProductBelden Tofino Xenon Security Appliance Firmware
PublishedApr 3, 2022
First seenApr 3, 2022
How to fix
Update
- belden tofino_xenon_security_appliance_firmware03.2.03 or later
- schneider-electric tcsefea23f3f22_firmware03.23 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| belden tofino_xenon_security_appliance_firmware | v < 03.2.03 | 03.2.03 |
| belden tofino_argon_fa-tsa-220-tx\/mm_firmware | No range specified | — |
| belden tofino_argon_fa-tsa-220-tx\/tx_firmware | No range specified | — |
| belden tofino_argon_fa-tsa-220-mm\/tx_firmware | No range specified | — |
| belden tofino_argon_fa-tsa-220-mm\/mm_firmware | No range specified | — |
| belden tofino_argon_fa-tsa-100-tx\/tx_firmware | No range specified | — |
| belden eagle_20_tofino_943_987-505-mm\/mm_firmware | No range specified | — |
| belden eagle_20_tofino_943_987-504-mm\/tx_firmware | No range specified | — |
| belden eagle_20_tofino_943_987-502_-tx\/mm_firmware | No range specified | — |
| belden eagle_20_tofino_943_987-501-tx\/tx_firmware | No range specified | — |
| schneider-electric tcsefea23f3f20_firmware | No range specified | — |
| schneider-electric tcsefea23f3f21_firmware | No range specified | — |
| schneider-electric tcsefea23f3f22_firmware | v < 03.23 | 03.23 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.