High severity · published Apr 3, 2022
CVE-2021-30063
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service
7.5
CVSS
1%
EPSS
No
On KEV
Description
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
E2
Eagle 20 Tofino 943 987-501-tx/tx Firmware · Belden
All versions, or not specified · source: NVD
E2
Eagle 20 Tofino 943 987-502 -tx/mm Firmware · Belden
All versions, or not specified · source: NVD
E2
Eagle 20 Tofino 943 987-504-mm/tx Firmware · Belden
All versions, or not specified · source: NVD
E2
Eagle 20 Tofino 943 987-505-mm/mm Firmware · Belden
All versions, or not specified · source: NVD
TF
Tcsefm0000 Firmware · Schneider-electric
before 03.23 · source: NVD
TA
Tofino Argon Fa-tsa-100-tx/tx Firmware · Belden
All versions, or not specified · source: NVD
TA
Tofino Argon Fa-tsa-220-mm/mm Firmware · Belden
All versions, or not specified · source: NVD
TA
Tofino Argon Fa-tsa-220-mm/tx Firmware · Belden
All versions, or not specified · source: NVD
TA
Tofino Argon Fa-tsa-220-tx/mm Firmware · Belden
All versions, or not specified · source: NVD
TA
Tofino Argon Fa-tsa-220-tx/tx Firmware · Belden
All versions, or not specified · source: NVD
TX
Tofino Xenon Security Appliance Firmware · Belden
before 03.2.03 · source: NVD
Affected product
E2
Eagle 20 Tofino 943 987-501-tx/tx Firmware
Belden
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-30063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-30063
Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
Vendor Advisory
https://www.belden.com/support/security-assurance
More from Eagle 20 Tofino 943 987-501-tx/tx Firmware
9.8
CVE-2021-30064
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded…
7.5
CVE-2021-30065
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the…
7.5
CVE-2021-30062
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer
6.8
CVE-2021-30066
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be…
6.8
CVE-2021-30061
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can…