CVE-2020-7486: Schneider Electric Tricon Tcm 4351 Firmware

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior.

Affected products

• Schneider Electric Tricon Tcm 4351 Firmware: version 10.3.x only; version 10.4.x only
• Schneider Electric Tricon Tcm 4351a Firmware: version 10.3.x only; version 10.4.x only
• Schneider Electric Tricon Tcm 4351b Firmware: version 10.3.x only; version 10.4.x only
• Schneider Electric Tricon Tcm 4352 Firmware: version 10.3.x only; version 10.4.x only
• Schneider Electric Tricon Tcm 4352a Firmware: version 10.3.x only; version 10.4.x only
• Schneider Electric Tricon Tcm 4352b Firmware: version 10.3.x only; version 10.4.x only

Published 2020-04-16. Last modified 2026-06-17.