CVE-2021-30064: Belden Eagle 20 Tofino 943 987-501-Tx/tx Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).

Affected products

• Belden Eagle 20 Tofino 943 987-501-Tx/tx Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-502 -Tx/mm Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-504-Mm/tx Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-505-Mm/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-100-Tx/tx Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Mm/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Mm/tx Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Tx/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Tx/tx Firmware: affected versions not specified
• Belden Tofino Xenon Security Appliance Firmware: before 03.2.03 (fixed in 03.2.03)
• Schneider Electric TCSEFEA23F3F20 Firmware: affected versions not specified
• Schneider Electric TCSEFEA23F3F21 Firmware: affected versions not specified
• Schneider Electric TCSEFEA23F3F22 Firmware: before 03.23 (fixed in 03.23)

Published 2022-04-03. Last modified 2026-06-17.