CVE-2021-30065: Belden Eagle 20 Tofino 943 987-501-Tx/tx Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.

Affected products

• Belden Eagle 20 Tofino 943 987-501-Tx/tx Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-502 -Tx/mm Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-504-Mm/tx Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-505-Mm/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-100-Tx/tx Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Mm/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Mm/tx Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Tx/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Tx/tx Firmware: affected versions not specified
• Belden Tofino Xenon Security Appliance Firmware: before 03.2.03 (fixed in 03.2.03)
• Schneider Electric TCSEFEA23F3F20 Firmware: affected versions not specified
• Schneider Electric TCSEFEA23F3F21 Firmware: affected versions not specified
• Schneider Electric TCSEFEA23F3F22 Firmware: before 03.23 (fixed in 03.23)

Published 2022-04-03. Last modified 2026-06-17.