Sign-up

ID

VAR-202101-2011


TITLE

Schneider Tricon safety instrumented system TCM 4351B communication card has a denial of service vulnerability (CNVD-2020-70795)

Trust: 0.6

sources: CNVD: CNVD-2020-70795

DESCRIPTION

The Tricon safety instrumented system is a safety instrumented system of Schneider Electric Co., Ltd. The TCM 4351B communication card is the communication card of Schneider's Tricon safety instrumented system, which supports Ethernet and serial communication. Schneider Tricon safety instrumented system TCM 4351B communication card has a denial of service vulnerability. An attacker can use this vulnerability to launch a denial of service attack.

Trust: 0.6

sources: CNVD: CNVD-2020-70795

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-70795

AFFECTED PRODUCTS

vendor:schneider electricmodel:tricon safety instrumented system tcm 4351b communication cardscope:eqversion:342.6428.0

Trust: 0.6

sources: CNVD: CNVD-2020-70795

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-70795
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-70795
severity: MEDIUM
baseScore: 6.1
vectorString: AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 6.5
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-70795

EXTERNAL IDS

db:CNVDid:CNVD-2020-70795

Trust: 0.6

sources: CNVD: CNVD-2020-70795

SOURCES

db:CNVDid:CNVD-2020-70795

LAST UPDATE DATE

2022-05-04T08:33:12.251000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-70795date:2020-12-14T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-70795date:2021-01-18T00:00:00