Schneider Electric Tricon Tcm 4351a Firmware vulnerabilities

2 CVEs affecting Schneider Electric Tricon Tcm 4351a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7491, published 2020-07-23.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7486, published 2020-04-16. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and…
• CVE-2020-7491, published 2020-07-23. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access.…