CVE-2021-30066: Belden Eagle 20 Tofino 943 987-501-Tx/tx Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400.

Affected products

• Belden Eagle 20 Tofino 943 987-501-Tx/tx Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-502 -Tx/mm Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-504-Mm/tx Firmware: affected versions not specified
• Belden Eagle 20 Tofino 943 987-505-Mm/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-100-Tx/tx Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Mm/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Mm/tx Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Tx/mm Firmware: affected versions not specified
• Belden Tofino Argon Fa-Tsa-220-Tx/tx Firmware: affected versions not specified
• Belden Tofino Xenon Security Appliance Firmware: before 03.2.03 (fixed in 03.2.03)
• Schneider Electric TCSEFEA23F3F20 Firmware: affected versions not specified
• Schneider Electric TCSEFEA23F3F21 Firmware: affected versions not specified
• Schneider Electric TCSEFEA23F3F22 Firmware: before 03.23 (fixed in 03.23)

Published 2022-04-03. Last modified 2026-06-17.