Belden Eagle 20 Tofino 943 987 502 Tx\/Mm vulnerabilities
6 vulnerabilities
Known vulnerabilities in Belden Eagle 20 Tofino 943 987 502 Tx\/Mm, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-30065beldeneagle_20_tofino_943_987-501-tx\/tx_firmware+12
EPSS score0.88%
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.CVE-2021-30062beldeneagle_20_tofino_943_987-501-tx\/tx_firmware+10EPSS score0.88%
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.CVE-2021-30063beldeneagle_20_tofino_943_987-501-tx\/tx_firmware+10EPSS score1.00%
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.CVE-2021-30061beldeneagle_20_tofino_943_987-501-tx\/tx_firmware+12EPSS score0.41%
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafted file on a USB stick.CVE-2021-30064beldeneagle_20_tofino_943_987-501-tx\/tx_firmware+12EPSS score0.90%
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).CVE-2021-30066beldeneagle_20_tofino_943_987-501-tx\/tx_firmware+12EPSS score0.25%
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400.